eseecloud_firmware vulnerabilities
CVEs whose affected-version data names the eseecloud_firmware package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-107617Critical· 9.8Guangzhou Juan IoT Technology EseeCloud Use of Hard-coded Credentials
An attacker can use a hard-coded credential to log in to EseeCloud devices.
CVE-2026-97858Medium· 5.3Guangzhou Juan IoT Technology EseeCloud Improperly Controlled Modification of Dynamically-Determined Object Attributes
An attacker can cause the server to unbind the target device from its current owner and rebind it to the requesting account, regardless of whether the device is currently bound to a different account, allowing an attacker to obtain the d…
CVE-2026-105664Medium· 5.3Guangzhou Juan IoT Technology EseeCloud Observable Response Discrepancy
The endpoint exposes an observable response discrepancy when processing ID values. A request submitted with a nonexistent ID returns a distinct error response code from one submitted with a valid, registered ID, allowing an attacker hold…