Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.3

EseeCloud devices allow login with hard-coded password

CVE-2026-107617 · published 22 days ago
Summary

EseeCloud devices contain a built‑in username and password that cannot be changed. An attacker who discovers these credentials can log in and control the device. Update the devices with the latest firmware or contact the vendor for a fix to remove the default login.

Original advisory text
An attacker can use a hard-coded credential to log in to EseeCloud devices.
An attacker can use a hard-coded credential to log in to EseeCloud devices.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
9.3 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-798Use of Hard-coded Credentials
Timeline
Published16 Oct 2026
Updated4 Nov 2026
First seen16 Oct 2026
Sources
CVE-2026-107617 · NVD
Track software like this
Free during beta