Back to Feed
VulnerabilitiesOct 15, 2026

Guangzhou Juan IoT Technology EseeCloud

Critical vulnerabilities in Guangzhou Juan IoT Technology's EseeCloud App and firmware allow attackers to gain control

Vendor Watch

Run Guangzhou Juan IoT Technology Co., Ltd.?

Get an email when a reviewed story names Guangzhou Juan IoT Technology Co., Ltd., usually within the hour.

Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy

Summary

Multiple critical vulnerabilities have been identified in Guangzhou Juan IoT Technology's EseeCloud App and firmware, affecting versions up to 4.9.6 for the app and 4.9.86.0 for the firmware. These flaws, including hard-coded credentials and improper modification controls, could allow attackers to gain full control over affected IP cameras. The company did not respond to CISA's coordination attempts, leaving users advised to contact the vendor directly for support.

The lesson from this incident

Full lesson

EseeCloud IP cameras manufactured by Guangzhou Juan IoT Technology contain hard-coded credentials and improper modification controls, meaning attackers who discover these static credentials can gain full control of affected devices with no additional effort. Hard-coded credentials are a fundamental design flaw that cannot be mitigated by end users changing passwords, since the credentials are embedded directly in firmware. The vendor's failure to respond to CISA's coordinated disclosure attempts compounds the risk, leaving potentially millions of users with no official patch or mitigation path. This case highlights the broader danger of IoT devices shipped with insecure-by-design configurations, where the attack surface is invisible to the average consumer.

What helps against this

How we list vendors

Indicators of Compromise

  • cve — CVE-2026-107617
  • cve — CVE-2026-97858
  • cve — CVE-2026-105664

Entities

Guangzhou Juan IoT Technology Co., Ltd. (vendor)EseeCloud App (product)EseeCloud Firmware (product)IP cameras (technology)