PatchSiren

EyeLock CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH EyeLock CVE published 2026-10-20

CVE-2016-20104

CVE-2016-20104 is a path traversal vulnerability in EyeLock nano NXT versions 3.05.1193, 3.04.1108, 3.03.944, and 3.01.646. The vulnerability allows unauthenticated attackers to read arbitrary files via the 'path' parameter in logdownload.php. To address this vulnerability, defenders should assess exposure, prioritize remediation, and verify the effectiveness of compensating controls.