CVE-2026-100295

MEDIUMCVSS 6.3

Description

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, an internal debug interface can be enabled through an undocumented pathway, exposing functions not intended for normal operation. When activated, this interface allows actions that could unintentionally provide elevated system access.

Timeline

Published:September 29th, 2026 8:17 PM

Last modified:September 29th, 2026 10:17 PM

CVSS Scoring

CVSS v3: 6.3 (MEDIUM)

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weaknesses (CWE)

CWE-489

References & Reports

Advisories, patches, and third-party reports

https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-05

Source: NIST NVD · Data may lag official sources by up to one minute