Is CVE-2026-86554 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-86554?

CVE-2026-86554 has a CVSS v3 severity of MEDIUM (4.3).

Back

CVE-2026-86554

Description

SmartLife app dynamically generates brand‑new SmartLife application authentication parameters within its runtime process. With the obtained SmartLife application authentication parameters, attackers can directly invoke the backend interface /account/verify.serv to determine whether a target email address is registered for a SmartLife account. If the account exists, the real backend account ID can also be retrieved.