CVE-2026-97858mediumCWE-915

CVE-2026-97858: falha de média gravidade em Guangzhou Juan IoT Technology Co., Ltd.

Guangzhou Juan IoT Technology EseeCloud Improperly Controlled Modification of Dynamically-Determined Object Attributes

Publicada em

Seguir esta CVE+ Monitorar EseeCloud+ Monitorar EseeCloud App

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.9epss 0.3%
An attacker can cause the server to unbind the target device from its current owner and rebind it to the requesting account, regardless of whether the device is currently bound to a different account, allowing an attacker to obtain the device's full serial ID.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Produtos afetados
Guangzhou Juan IoT Technology Co., Ltd. · EseeCloud AppGuangzhou Juan IoT Technology Co., Ltd. · EseeCloud Firmware
CVEs relacionadas — Guangzhou Juan IoT Technology Co., Ltd.

No mesmo produto, das mais perigosas para as menos.

CVE-2026-107617CRITICALGuangzhou Juan IoT Technology EseeCloud Use of Hard-coded CredentialsEPSS 0.4%CVE-2026-105664MEDIUMGuangzhou Juan IoT Technology EseeCloud Observable Response DiscrepancyEPSS 0.3%