[ CVE-2026-97858 · Published 16 Oct 2026 ]
Vulnerability in Guangzhou Juan IoT Technology Co., Ltd. EseeCloud App
CVSS 5.3
EPSS <1%No fix listed yet
[ Description ]Official description
An attacker can cause the server to unbind the target device from its current owner and rebind it to the requesting account, regardless of whether the device is currently bound to a different account, allowing an attacker to obtain the device's full serial ID.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.