CVE@CVEnew
CVE-2026-107617 An attacker can use a hard-coded credential to log in to EseeCloud devices. https://www.cve.org/CVERecord?id=CVE-2026-107617
00000920
58.2K followersView on X
CVE-2026-107617
LOWCVSS 9.3 · CRITICALImmediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
An attacker can use a hard-coded credential to log in to EseeCloud devices.
0.0/ 10 priority
Sources & remediation
Other references
Weakness type (CWE)
CWE-798
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
Deep dive
Full discourse2 posts
Aviatrix Threat Research Center@aviatrixtrcHard-coded credentials in EseeCloud IP cameras (CVE-2026-107617, CVSS 9.8) give unauthenticated attackers full device control—no login required, no patch available. From there, an enumeration oracle and device rebinding flaw let attackers hijack an entire cloud-managed camera fleet at scale across energy, transportation, and government sectors. #CloudSecurity #ThreatIntel 🔗 Full TRC analysis: https://aviatrix.ai/threat-research-center/icsa-26-288-02-eseecloud-iot-camera-hardcoded-credentials-cve-2026-107617
00000352.0K followersView on X