No official patches have been released by Guangzhou Juan IoT Technology Co., Ltd. EseeCloud users are advised to contact the vendor for support at https://eseecloud.app/. Mitigation involves updating to newer software versions if available, monitoring vendor advisories, and implementing network segmentation to limit exposure of EseeCloud devices. Users should also enforce strong, unique credentials where possible and monitor for anomalous device behavior.
Quick answers
What is CVE-2026-107617?
No official patches have been released by Guangzhou Juan IoT Technology Co., Ltd. EseeCloud users are advised to contact the vendor for support at https://eseecloud.app/. Mitigation involves updating to newer software versions if available, monitoring vendor advisories, and implementing network segmentation to limit exposure of EseeCloud devices. Users should also enforce strong, unique credentials where possible and monitor for anomalous device behavior.
How severe is CVE-2026-107617?
critical, CVSS 9.8
Is CVE-2026-107617 known to be exploited?
It is not marked known-exploited in this record.
How should CVE-2026-107617 be mitigated?
No official patches have been released by Guangzhou Juan IoT Technology Co., Ltd. EseeCloud users are advised to contact the vendor for support at https://eseecloud.app/. Mitigation involves updating to newer software versions if available, monitoring vendor advisories, and implementing network segmentation to limit exposure of EseeCloud devices. Users should also enforce strong, unique credentials where possible and monitor for anomalous device behavior.
CVSS
9.8
Vendor
Guangzhou Juan IoT Technology Co., Ltd.
Published
Oct 17, 2026 · 07:13
Patch
Unknown / not confirmed
Affected products
EseeCloud App, EseeCloud Firmware
Mitigation
No official patches have been released by Guangzhou Juan IoT Technology Co., Ltd. EseeCloud users are advised to contact the vendor for support at https://eseecloud.app/. Mitigation involves updating to newer software versions if available, monitoring vendor advisories, and implementing network segmentation to limit exposure of EseeCloud devices. Users should also enforce strong, unique credentials where possible and monitor for anomalous device behavior.
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an industrial control systems advisory (ICSA-26-288-02) warning of three vulnerabilities in Guangzhou Juan IoT Technology EseeCloud software. The flaws affect EseeCloud App version 4.9.6 and earlier, and EseeCloud Firmware version 4.9.86.0 and earlier. Successful exploitation could allow attackers to gain control of affected IP cameras, enumerate registered devices at scale, and rebind devices to unauthorized accounts. The vendor did not respond to CISA's coordination attempts, and no official patches have been released.