Is CVE-2026-86552 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-86552?

CVE-2026-86552 has a CVSS v3 severity of MEDIUM (5.4).

Back

CVE-2026-86552

Description

SmartLife app dynamically generates brand‑new SmartLife application authentication parameters at runtime. With the acquired SmartLife application authentication credentials, an attacker can directly complete registration using any arbitrary email address via the backend interface /account/person/signup.serv. Email ownership is not verified prior to registration.