CVE-2026-97858Medium· 5.3▾ SunlitAn attacker can cause the server to unbind the target device from its current owner and rebind it to the requesting account, regardless of whether the device is currently bound to a different account, allowing an attacker to obtain the d…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
An attacker can cause the server to unbind the target device from its current owner and rebind it to the requesting account, regardless of whether the device is currently bound to a different account, allowing an attacker to obtain the device's full serial ID.
eseecloud_app <= 4.9.6eseecloud_firmware <= 4.9.86.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Guangzhou Juan IoT Technology Co., Ltd. did not respond to CISA's coordination attempts. EseeCloud users are advised to contact Guangzhou Juan IoT Technology Co., Ltd. for support https://eseecloud.app/ .
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-107617Critical· 9.8Guangzhou Juan IoT Technology EseeCloud Use of Hard-coded Credentials
CVE-2026-105664Medium· 5.3Guangzhou Juan IoT Technology EseeCloud Observable Response Discrepancy
CVE-2026-110804NoneImproperly controlled modification of JIT elevation settings in PAM checkout in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with PAM checkout access to delete arbitrary Active Directory groups or retain elevate…
CVE-2026-77470High· 8.3Lychee is a free, open-source photo-management tool
CVE-2026-2950Medium· 6.5The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution
CVE-2026-108948Medium· 5.4A vulnerability has been found in code-projects Online Reviewer System 1.0