eseecloud_app vulnerabilities
CVEs whose affected-version data names the eseecloud_app package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-107617Critical· 9.8An attacker can use a hard-coded credential to log in to EseeCloud devices.
An attacker can use a hard-coded credential to log in to EseeCloud devices.
CVE-2026-97858Medium· 5.3An attacker can cause the server to unbind the target device from its current owner and rebind it to the requesting account, regardless of whether the device is currently bound to a different account, allowing an attacker to obtain the d…
An attacker can cause the server to unbind the target device from its current owner and rebind it to the requesting account, regardless of whether the device is currently bound to a different account, allowing an attacker to obtain the d…
CVE-2026-105664Medium· 5.3The endpoint exposes an observable response discrepancy when processing ID values
The endpoint exposes an observable response discrepancy when processing ID values. A request submitted with a nonexistent ID returns a distinct error response code from one submitted with a valid, registered ID, allowing an attacker hold…