CVE-2026-100297

Medium5.3Published on September 29, 2026

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, an unauthenticated network check function can be triggered to probe arbitrary hosts from the device’s internal network. This may expose internal information or leak data via DNS queries.

CVSS score5.3 / 10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness type (CWE)CWE-918

Vulnerabilities

Nine Flaws Leave Anjvision Video Devices Exposed Without a Planned Firmware Fix

CISA disclosed nine flaws in Anjvision YSSD-RTMP-H5 firmware, including unauthenticated access and RCE, with CVSS 9.8 and no fix planned.

Sep 30, 202605:105 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Related articles

Nine Flaws Leave Anjvision Video Devices Exposed Without a Planned Firmware Fix