CVE-2026-100906
MediumCVSS 5.3Summary
In Eyeplus 57.0.0.0308, the GetUsers function in the /onvif/Device file of the ONVIF component leads to information disclosure. The attack can be executed remotely. The exploit is now public and may be used.
Risk Assessment
Disclosure of user information may enable further attacks such as phishing or unauthorized access.
Recommendation
Update Eyeplus to the latest version and restrict access to the ONVIF interface to trusted networks only.
Other vulnerabilities in Eyeplus
See all- CVE-2026-100908High
Vulnerability in Eyeplus 57.0.0.0308 in an unknown function of the p2pcam HTTP Parser component. Manipulation leads to stack-based buffer overflow. Remote attack possible, exploit publicly disclosed.
- CVE-2026-100907Medium
In Eyeplus 57.0.0.0308, an unknown function in the file /snapshot of the p2pcam Service leads to information disclosure. The attack can be performed remotely. The exploit has been published and may be used.
Original NVD description (English source)
A vulnerability was detected in Eyeplus 57.0.0.0308. The affected element is the function GetUsers of the file /onvif/Device of the component ONVIF. The manipulation results in information disclosure. The attack can be executed remotely. The exploit is now public and may be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS