CVE-2026-100907

5.3 MEDIUMpublic exploit available

Published 2026-09-28 · Updated 2026-09-28

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

A flaw has been found in Eyeplus 57.0.0.0308. The impacted element is an unknown function of the file /snapshot of the component p2pcam Service. This manipulation causes information disclosure. The attack is possible to be carried out remotely. The exploit has been published and may be used.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weaknesses

CWE-200, CWE-284

Public exploit & PoC references

https://github.com/devjanger/iot-advisories/blob/main/EYEPLUS-8001-Unauth-Snapshot-Disclosure.md

All references

https://github.com/devjanger/iot-advisories/blob/main/EYEPLUS-8001-Unauth-Snapshot-Disclosure.md
https://vuldb.com/cve/CVE-2026-100907
https://vuldb.com/submit/919784
https://vuldb.com/vuln/410858
https://vuldb.com/vuln/410858/cti

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

MEDIUMCVE-2026-100906PoC
MEDIUMCVE-2026-101055PoC
MEDIUMCVE-2026-101083
MEDIUMCVE-2026-101143
MEDIUMCVE-2026-101146
MEDIUMCVE-2026-102845PoC
UNSCOREDCVE-2026-56729PoC
UNSCOREDCVE-2026-57449PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.