CVE-2026-107617: Guangzhou Juan IoT Technology EseeCloud Use of Hard-coded Credentials
Published Oct 16, 2026
·Updated
An attacker can use a hard-coded credential to log in to EseeCloud devices.
Affected Software
1 affected component
Guangzhou Juan IoT Technology EseeCloud
Event History
Oct 16, 2026
CVE Published
via MITRE·02:02 PM
Data Sourced
via MITRE·02:02 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments are exposed to this issue?
EseeCloud devices from Guangzhou Juan IoT Technology are identified as affected. The available information does not specify particular device models, firmware versions, or deployment configurations.
2
What does an attacker need to exploit it?
The vulnerability is remotely exploitable over the network and requires no privileges or user interaction. An attacker who can use the hard-coded credential can log in to an affected device.
3
What access could exploitation provide?
Successful exploitation provides device login access. The assigned critical severity vector indicates potential high impact to confidentiality, integrity, and availability.