CVE-2026-86554

Name of the Vulnerable Software and Affected Versions SmartLife app (affected versions not specified)

Description The application dynamically generates authentication parameters during its runtime process. An attacker who obtains these parameters can invoke the backend interface '/account/verify.serv' to verify if a specific email address is registered. If the account is found, the backend account ID is leaked.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.