critical·Product Based Network Vulnerabilities·Updated Sep 23, 2025

EyesOfNetwork - Hardcoded API Key

Run This Scanner →

Est. Time~10 seconds

Scan TypeGroup Scan

Targetsdomain, subdomain, ipv4

CostFree

2.6k

Times Used

continuous scan runs

Continuously Checked

assets under CS

Vulnerabilities Found

confirmed findings

References

github.com↗

🔴

CISA Known Exploited Vulnerability

This CVE is actively exploited in the wild. CISA mandates federal agencies to patch immediately.

CVECVE-2020-8657

9.8

CVSScritical

Exploitable remotely over the internet · no authentication required.

An issue was discovered in EyesOfNetwork 5.3. The installation uses the same API key (hardcoded as EONAPI_KEY in include/api_functions.php for API version 2.4.2) by default for all installations, hence allowing an attacker to calculate/guess the admin access token.

Attack Vector

Network

Privileges Req.

None

User Interaction

None

Affected

n/aby n/a

n/a

Updated Sep 9, 2026View on NVD →

Similar Tools

Check your infrastructure.
Right now.

11,000+ scanners. Free to start. No credit card required.

Run This Scanner →Browse All Tools

EyesOfNetwork - Hardcoded API Key

Check your infrastructure.Right now.

Check your infrastructure.
Right now.