An issue was discovered in EyesOfNetwork 5.3.
Priority HIGH 83CWE-89Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- SQL injection
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-89.
Summary
An issue was discovered in EyesOfNetwork 5.3. The EyesOfNetwork API 2.4.2 is prone to SQL injection, allowing an unauthenticated attacker to perform various tasks such as authentication bypass via the username field to getApiKey in include/api_functions.php.
Why it matters now
EPSS 0.846 99th percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by NVD
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:eyesofnetwork:eyesofnetwork:5.3-0:*:*:*:*:*:*:* | 5.3-0 | Vulnerable | EyesOfNetwork |
- cpe:2.3:a:eyesofnetwork:eyesofnetwork:5.3-0:*:*:*:*:*:*:* Versions 5.3-0 Vulnerable ·EyesOfNetwork
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2020-8656
- 2026-10-03 Alias added: GHSA-9vpp-5ch5-wr42
References
More Eyesofnetwork vulnerabilities
- TI-2020-06937 An issue was discovered in EyesOfNetwork 5.3. KEVCVSS 3.1CRITICAL 9.8
- TI-2020-06935 An issue was discovered in EyesOfNetwork 5.3. KEVCVSS 3.1HIGH 7.8
- TI-2020-07575 An issue was discovered in EyesOfNetwork eonweb 5.1 through 5.3 before 5.3-3. CVSS 3.1CRITICAL 9.8
- TI-2020-06934 An issue was discovered in EyesOfNetwork 5.3. CVSS 3.1HIGH 8.8
- TI-2021-08993 The module admin_ITSM in EyesOfNetwork 5.3-10 allows remote authenticated users to upload… CVSS 3.1HIGH 8.8
- TI-2022-19976 An issue was discovered in EyesOfNetwork (EON) through 5.3.11. CVSS 3.1CRITICAL 9.8
Sources
- CVE-2020-8656 · CVE Program
- CVE-2020-8656 · NVD
- FIRST EPSS
- GHSA-9vpp-5ch5-wr42 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences