CVE-2026-100907: Eyeplus p2pcam Service snapshot information disclosure
Published Sep 28, 2026
·Updated
A flaw has been found in Eyeplus 57.0.0.0308. The impacted element is an unknown function of the file /snapshot of the component p2pcam Service. This manipulation causes information disclosure. The attack is possible to be carried out remotely. The exploit has been published and may be used.
Affected Software
1 affected component
Eyeplus p2pcam Service=57.0.0.0308
Event History
Sep 28, 2026
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The issue can be exploited remotely with no privileges or user interaction required. An attacker only needs network reachability to the affected p2pcam Service.
2
Is there public exploit availability?
Yes. An exploit has been published and may be used, increasing the likelihood of opportunistic attempts against reachable services.
3
What data can be exposed?
The available information identifies the impact as information disclosure through the /snapshot endpoint, but does not specify the exact data exposed.