CVE-2026-105664 Details
Description
The endpoint exposes an observable response discrepancy when processing ID values. A request submitted with a nonexistent ID returns a distinct error response code from one submitted with a valid, registered ID, allowing an attacker holding a valid access token - but without further authentication or authorization - to distinguish valid ID values from the full 10-digit numeric search space. Combined with the absence of meaningful rate limiting on this endpoint, this discrepancy constitutes an enumeration oracle, enabling an attacker to discover registered devices at scale.
A vulnerability exists in the Guangzhou Juan IoT Technology EseeCloud application and firmware, both through version 4.9.6 and 4.9.86.0, respectively. The issue arises from an observable response discrepancy when the endpoint processes ID values. Requests with nonexistent IDs return a different error response code compared to those with valid, registered IDs. This allows an attacker with a valid access token, but without additional authentication or authorization, to differentiate between valid ID values and invalid ones within the entire 10-digit numeric search space. The lack of effective rate limiting on this endpoint further exacerbates the issue, creating an enumeration oracle that enables attackers to discover registered devices on a large scale.
Users are advised to contact Guangzhou Juan IoT Technology Co., Ltd. for support.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 16, 2026CISA-ADP
Assessed Oct 16, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://eseecloud.app/ | [email protected] | ProductVendor |
| https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-288-02.json | [email protected] | AdvisoryBundleRemedy |
| https://www.cisa.gov/news-events/ics-advisories/icsa-26-288-02 | [email protected] | AdvisoryBundleRemedy |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-204 | Observable Response Discrepancy | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Guangzhou Juan IoT Technology EseeCloud | <= 4.9.6 (semver) <= 4.9.86.0 |
CPE
Remediation
| |
| Guangzhou Juan IoT Technology EseeCloud N8225 | All versions |
CPE
Remediation
| |
| Guangzhou Juan IoT Technology EseeCloud N8216 | All versions |
CPE
Remediation
| |
| Guangzhou Juan IoT Technology EseeCloud DVR JA-R5124-H | All versions |
CPE
Remediation
| |
| Guangzhou Juan IoT Technology EseeCloud DVR JA-R5116-2H | All versions |
CPE
Remediation
| |
| Guangzhou Juan IoT Technology EseeCloud DVR JA-R5108-2H | All versions |
CPE
Remediation
| |
| Guangzhou Juan IoT Technology EseeCloud N8236 | All versions |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 16, 2026 | CVE Modified | CISA-ADP |
| Oct 16, 2026 | New CVE Received | [email protected] |