CVE-2026-86552

Name of the Vulnerable Software and Affected Versions SmartLife app (affected versions not specified)

Description The application dynamically generates authentication parameters at runtime. An attacker who acquires these credentials can use the backend interface '/account/person/signup.serv' to register accounts using any arbitrary email address, as the system does not verify email ownership prior to registration.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.