Skip to content
OpenAdvisories
Critical ICSA-26-288-02 3 CVEs

Guangzhou Juan IoT Technology EseeCloud

Published Oct 15, 2026 · Updated Oct 15, 2026

Vendor: Guangzhou Juan IoT Technology Product: EseeCloud App Product: EseeCloud Firmware

Summary

Successful exploitation of these vulnerabilities could allow an attacker to gain control over affected IP cameras.

Vulnerabilities 3

  • Critical 9.8
    CVE-2026-107617

    Guangzhou Juan IoT Technology EseeCloud Use of Hard-coded Credentials

    An attacker can use a hard-coded credential to log in to EseeCloud devices.

    Guangzhou Juan IoT Technology EseeCloud App EseeCloud Firmware
  • Medium 5.3
    CVE-2026-105664

    Guangzhou Juan IoT Technology EseeCloud Observable Response Discrepancy

    The endpoint exposes an observable response discrepancy when processing ID values. A request submitted with a nonexistent ID returns a distinct error response code from one submitted with a valid, registered ID, allowing an attacker holding a valid access tok…

    Guangzhou Juan IoT Technology EseeCloud App EseeCloud Firmware
  • Medium 5.3
    CVE-2026-97858

    Guangzhou Juan IoT Technology EseeCloud Improperly Controlled Modification of Dynamically-Determined Object Attributes

    An attacker can cause the server to unbind the target device from its current owner and rebind it to the requesting account, regardless of whether the device is currently bound to a different account, allowing an attacker to obtain the device's full serial ID.

    Guangzhou Juan IoT Technology EseeCloud Firmware EseeCloud App

Revision history

  1. #1

    Initial Publication

References