CVE-2026-100908
HighCVSS 7.5Summary
Vulnerability in Eyeplus 57.0.0.0308 in an unknown function of the p2pcam HTTP Parser component. Manipulation leads to stack-based buffer overflow. Remote attack possible, exploit publicly disclosed.
Risk Assessment
A remote attacker can cause a system crash or execute arbitrary code, potentially leading to full device compromise.
Recommendation
Contact the vendor for updates or restrict device access to trusted networks.
Other vulnerabilities in Eyeplus
See all- CVE-2026-100907Medium
In Eyeplus 57.0.0.0308, an unknown function in the file /snapshot of the p2pcam Service leads to information disclosure. The attack can be performed remotely. The exploit has been published and may be used.
- CVE-2026-100906Medium
In Eyeplus 57.0.0.0308, the GetUsers function in the /onvif/Device file of the ONVIF component leads to information disclosure. The attack can be executed remotely. The exploit is now public and may be used.
Original NVD description (English source)
A vulnerability has been found in Eyeplus 57.0.0.0308. This affects an unknown function of the component p2pcam HTTP Parser. Such manipulation leads to stack-based buffer overflow. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS