8 matches found
CVE-2026-107617
An attacker can use a hard-coded credential to log in to EseeCloud devices...
CVE-2026-105664 Guangzhou Juan IoT Technology EseeCloud Observable Response Discrepancy
The endpoint exposes an observable response discrepancy when processing ID values. A request submitted with a nonexistent ID returns a distinct error response code from one submitted with a valid, registered ID, allowing an attacker holding a valid access token - but without further authenticatio...
CVE-2026-105664
The Guangzhou Juan IoT Technology EseeCloud platform is vulnerable to an observable response discrepancy (CWE-204) when processing ID values. An attacker possessing a valid access token can distinguish valid, registered IDs from the 10-digit numeric search space because the system returns differe...
CVE-2026-97858 Guangzhou Juan IoT Technology EseeCloud Improperly Controlled Modification of Dynamically-Determined Object Attributes
An attacker can cause the server to unbind the target device from its current owner and rebind it to the requesting account, regardless of whether the device is currently bound to a different account, allowing an attacker to obtain the device's full serial ID...
CVE-2026-97858
A vulnerability exists in Guangzhou Juan IoT Technology EseeCloud (CWE-915) where an attacker can trigger the server to unbind a target device from its current owner and rebind it to the requesting account. This action can be performed regardless of whether the device is already associated with a...
CVE-2026-107617 Guangzhou Juan IoT Technology EseeCloud Use of Hard-coded Credentials
An attacker can use a hard-coded credential to log in to EseeCloud devices...
CVE-2026-107617
EseeCloud devices are vulnerable to unauthorized access because an attacker can use hard-coded credentials to log in. This vulnerability, identified as CVE-2026-107617 , stems from the use of hard-coded credentials (CWE-798 ) within the product. The impact includes high consequences for confident...
