CVE-2026-105664Medium· 5.3▾ SunlitThe endpoint exposes an observable response discrepancy when processing ID values. A request submitted with a nonexistent ID returns a distinct error response code from one submitted with a valid, registered ID, allowing an attacker hold…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
The endpoint exposes an observable response discrepancy when processing ID values. A request submitted with a nonexistent ID returns a distinct error response code from one submitted with a valid, registered ID, allowing an attacker holding a valid access token - but without further authentication or authorization - to distinguish valid ID values from the full 10-digit numeric search space. Combined with the absence of meaningful rate limiting on this endpoint, this discrepancy constitutes an enumeration oracle, enabling an attacker to discover registered devices at scale.
eseecloud_app <= 4.9.6eseecloud_firmware <= 4.9.86.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Guangzhou Juan IoT Technology Co., Ltd. did not respond to CISA's coordination attempts. EseeCloud users are advised to contact Guangzhou Juan IoT Technology Co., Ltd. for support https://eseecloud.app/ .
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-107617Critical· 9.8Guangzhou Juan IoT Technology EseeCloud Use of Hard-coded Credentials
CVE-2026-97858Medium· 5.3Guangzhou Juan IoT Technology EseeCloud Improperly Controlled Modification of Dynamically-Determined Object Attributes
CVE-2026-14177High· 7.5User Enumeration via Password Reset in IKAS Technology Inc.'s ikas E-Commerce Infrastructure
CVE-2026-111386Medium· 4.3Nezha 1.7.0 before 2.3.15 Cross-Tenant Server-ID Enumeration via getServerConfig
CVE-2026-111235Critical· 9.1An authorization bypass vulnerability exists in the REST API of multiple versions of OpenNMS Meridian and Horizon
CVE-2026-110310Medium· 5.3A remote user who can read encrypted objects in the S3 bucket can force a padding downgrade by altering the padding scheme recorded in an object's metadata to legacy PKCS#1 v1.5