Hard-Coded Credential Vulnerability in EseeCloud Devices by EseeCloud
CVE-2026-107617
9.3CRITICAL
Key Information:
- Vendor
- CVE Published:
- 16 October 2026
What is CVE-2026-107617?
A serious security vulnerability has been identified in EseeCloud devices, allowing an attacker to log in using hard-coded credentials. This weakness presents significant risks as unauthorized users may gain access to sensitive functions and data. Users are strongly advised to review their device configurations and ensure that any hard-coded credentials are changed to secure alternatives. For more details, refer to the advisories issued by CISA and other cybersecurity sources.
Affected Version(s)
EseeCloud App 0 <= 4.9.6
EseeCloud Firmware 0 <= 4.9.86.0
References
CVSS V4
Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Donghyeon Lee of Tokyo University of Science and GMO Flatt Security reported this vulnerability to CISA.