CVE-2026-100294

HIGHCVSS 7.5

Description

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the firmware embeds hardcoded cloud‑API credentials that are shared across deployed devices. Anyone obtaining the public firmware package can reuse these values to interact with the cloud service in ways not intended for normal operation.

Timeline

Published:September 29th, 2026 8:17 PM

Last modified:September 29th, 2026 10:17 PM

CVSS Scoring

CVSS v3: 7.5 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

CWE-798

References & Reports

Advisories, patches, and third-party reports

https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-05

Source: NIST NVD · Data may lag official sources by up to one minute