CVE-2026-100906

Name of the Vulnerable Software and Affected Versions Eyeplus version 57.0.0.0308

Description A remote information disclosure issue exists within the ONVIF component. The flaw is located in the GetUsers() function of the /onvif/Device file, allowing an attacker to remotely obtain sensitive information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the GetUsers() function in the /onvif/Device file to minimize the risk of exploitation.