CVE-2026-100906

MEDIUMCVSS 5.3

Description

A vulnerability was detected in Eyeplus 57.0.0.0308. The affected element is the function GetUsers of the file /onvif/Device of the component ONVIF. The manipulation results in information disclosure. The attack can be executed remotely. The exploit is now public and may be used.

Timeline

Published:September 28th, 2026 4:17 AM

Last modified:September 28th, 2026 3:16 PM

CVSS Scoring

CVSS v3: 5.3 (MEDIUM)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CVSS v2: 5.0

Weaknesses (CWE)

CWE-200 CWE-284

References & Reports

Advisories, patches, and third-party reports

https://github.com/devjanger/iot-advisories/blob/main/EYEPLUS-GetUsers-Unauth-Plaintext-Password.md
https://vuldb.com/cve/CVE-2026-100906
https://vuldb.com/submit/919771
https://vuldb.com/vuln/410857
https://vuldb.com/vuln/410857/cti

Source: NIST NVD · Data may lag official sources by up to one minute