CVE-2026-100297

MEDIUMCVSS 5.3

Description

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, an unauthenticated network check function can be triggered to probe arbitrary hosts from the device’s internal network. This may expose internal information or leak data via DNS queries.

Timeline

Published:September 29th, 2026 8:17 PM

Last modified:September 29th, 2026 10:17 PM

CVSS Scoring

CVSS v3: 5.3 (MEDIUM)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weaknesses (CWE)

CWE-918

References & Reports

Advisories, patches, and third-party reports

https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-05

Source: NIST NVD · Data may lag official sources by up to one minute