by Kastro
Paper/Archive/CVE-2026-100291

CVE-2026-100291

Anjvision YSSD-RTMP-H5 — Initialization of a resource with an insecure default in Anjvision YSSD-RTMP-H5

EPSS 0.4%CVSS 9.8
critical.is priorityof 100
35
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 28.8.288 × 205.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, several ONVIF service endpoints process management requests without enforcing required authentication. This could allow an unauthorized attacker to access sensitive device operations.

Affected

ProductAffectedFixed inSource
YSSD-RTMP-H5Version 3.3.2.4 build 2024-12-26–CNA

Scores by source

icscert (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
icscert (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refcisa.gov/news-events/ics-advisories/icsa-26-272-05