CVE-2026-97858 — Guangzhou Juan IoT Technology EseeCloud Improperly Controlled Modification of Dynamically-Determined Object Attributes
An attacker can cause the server to unbind the target device from its current owner and rebind it to the requesting account, regardless of whether the device is currently bound …
Published: 2026-10-16 · CVSS: 6.9 · CVSS 4.0
An attacker can cause the server to unbind the target device from its current owner and rebind it to the requesting account, regardless of whether the device is currently bound to a different account, allowing an attacker to obtain the device's full serial ID.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7