CVE-2026-97858
CVE-2026-97858 · Guangzhou Juan IoT Technology EseeCloud Improperly Controlled Modification of Dynamically-Determined Object Attributes
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An attacker can cause the server to unbind the target device from its current owner and rebind it to the requesting account, regardless of whether the device is currently bound to a different account, allowing an attacker to obtain the device's full serial ID.
CVSS 6.9 · Medium · EPSS 0.3%
- Published
- Updated
Affected products and versions
eseecloud app
- Versions
- ≥ 0, ≤ 4.9.6: Affected (custom)
No fix published
eseecloud firmware
- Versions
- ≥ 0, ≤ 4.9.86.0: Affected (custom)
No fix published