What is GHSA-4pf2-5j8p-ghjv?

GHSA-4pf2-5j8p-ghjv is a security advisory published by GitHub Security Advisories with Low severity. The ZTE Smart Life app contains an SQL injection vulnerability that allows attackers to execute...

Which CVE IDs does GHSA-4pf2-5j8p-ghjv cover?

GHSA-4pf2-5j8p-ghjv covers the following CVE IDs: CVE-2026-8029. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-4pf2-5j8p-ghjv?

GHSA-4pf2-5j8p-ghjv has a CVSS v3 base score of 3.9, published by GitHub Security Advisories.

GHSA-4pf2-5j8p-ghjvLowCVSS 3.9

The ZTE Smart Life app contains an SQL injection vulnerability that allows attackers to execute...

Vendor

GitHub Security Advisories

Published

August 5, 2026

Last Modified

August 5, 2026

🔗 CVE IDs covered (1)

CVE-2026-8029 →

📋 Description

The ZTE Smart Life app contains an SQL injection vulnerability that allows attackers to execute UNION SELECT statements to query sensitive data in the feedback.db database across tables, including user accounts, phone numbers, feedback content, and local debug log paths, thereby enabling the theft of local privacy data.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-8029
https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/874505866159001729
https://github.com/advisories/GHSA-4pf2-5j8p-ghjv