Is CVE-2026-86553 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-86553?

CVE-2026-86553 has a CVSS v3 severity of HIGH (8.8).

Back

CVE-2026-86553

Description

SmartLife app dynamically generates fresh SmartLife application authentication parameters inside its runtime process. Using the acquired SmartLife application authentication parameters, an attacker can directly call the backend interface /account/verify.serv to obtain the real account ID corresponding to a registered email address. By spoofing the application authentication information together with the target account ID, the attacker can reset the password of the target account.