[ CVE-2026-100294 · Published 29 Sep 2026 ]
Vulnerability in Anjvision YSSD-RTMP-H5
CVSS 7.5
EPSS <1%No fix listed yet
[ Description ]Official description
In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the firmware embeds hardcoded cloud‑API credentials that are shared across deployed devices. Anyone obtaining the public firmware package can reuse these values to interact with the cloud service in ways not intended for normal operation.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.