CVE-2026-100907
MediumCVSS 5.3Summary
In Eyeplus 57.0.0.0308, an unknown function in the file /snapshot of the p2pcam Service leads to information disclosure. The attack can be performed remotely. The exploit has been published and may be used.
Risk Assessment
Information disclosure may allow an attacker to access sensitive data, potentially compromising privacy and system security.
Recommendation
Update Eyeplus to the latest available version and monitor the system for unauthorized access.
Other vulnerabilities in Eyeplus
See all- CVE-2026-100908High
Vulnerability in Eyeplus 57.0.0.0308 in an unknown function of the p2pcam HTTP Parser component. Manipulation leads to stack-based buffer overflow. Remote attack possible, exploit publicly disclosed.
- CVE-2026-100906Medium
In Eyeplus 57.0.0.0308, the GetUsers function in the /onvif/Device file of the ONVIF component leads to information disclosure. The attack can be executed remotely. The exploit is now public and may be used.
Original NVD description (English source)
A flaw has been found in Eyeplus 57.0.0.0308. The impacted element is an unknown function of the file /snapshot of the component p2pcam Service. This manipulation causes information disclosure. The attack is possible to be carried out remotely. The exploit has been published and may be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

