TGViewer
Netsec Netsec @rnetsec · 7.89K subscribers
Post #23623 359
ZTE SmartHome Account Takeover: Password Reset Without Verification Code. 4 CVEs, 100K+ Android Downloads - CVE-2026-86553
https://minanagehsalalma.github.io/zte-smartlife-app-pwned/

Submitted September 21, 2026 at 10:00PM by TheReedemer69
via reddit https://ift.tt/6FZrOV0
minanagehsalalma.github.io ZTE Smarthome TakeOver Technical writeup on ZTE SmartLife security findings covering app-auth recovery, account enumeration, password reset behavior, signup abuse, and Homecare SDK reach.
Open in Telegram All posts from @rnetsec
More from @rnetsec
  1. Sep 23, 2026I asked my AI agent to inspect a website. The website took over my machine (34-run measure…
  2. Sep 23, 2026Breaking the Superuser Guardrails of managed-PostgreSQL Providers https://ift.tt/1YW7QpU S…
  3. Sep 23, 2026Inside Corp MDM, the Android spyware targeting logistics companies https://ift.tt/pLsq2PN…
  4. Sep 23, 2026Android 17 enables certificate transparency, and breaks custom CAs https://ift.tt/SNPcF1n…
  5. Sep 23, 2026Free, hands-on 14-week university security course (open to anyone online) https://ift.tt/H…
  6. Sep 23, 2026Leaked GitHub App private keys let researchers impersonate 440 apps including CDC and Buil…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →