CISA 2026-10-15

Guangzhou Juan IoT Technology EseeCloud

Machine-generated analysis · WAYSCloud LLM

EseeCloud App versions up to 4.9.6 and firmware up to 4.9.86.0 contain hard-coded credentials.

Context

The advisory identifies the EseeCloud App and firmware from Guangzhou Juan IoT Technology as the affected products. It states that versions up to 4.9.6 (app) and 4.9.86.0 (firmware) are vulnerable to hard-coded credentials, improperly controlled attribute modification, and observable response discrepancies, with a CVSS base score of 9.8. The vendor did not respond to coordination attempts, and users are advised to contact the vendor for support.

Operator considerations

Check: inventory EseeCloud app and firmware versions to identify any installations at or below 4.9.6 / 4.9.86.0.
Isolate: segment affected cameras from sensitive network zones.
Log: monitor authentication logs for unexpected logins using default credentials.
Patch: no vendor patch is available; contact Guangzhou Juan IoT Technology for support.

From Cybersecurity and Infrastructure Security Agency ↗

Successful exploitation of these vulnerabilities could allow an attacker to gain control over affected IP cameras.

The following versions of Guangzhou Juan IoT Technology EseeCloud are affected:

EseeCloud App

Read the full advisory on CISA →