CVE-2026-100291 — Initialization of a resource with an insecure default in Anjvision YSSD-RTMP-H5
In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, several ONVIF service endpoints process management requests without enforcing required authentication. This could allow an un…
Published: 2026-09-29 · CVSS: 9.3 · CVSS 4.0
In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, several ONVIF service endpoints process management requests without enforcing required authentication. This could allow an unauthorized attacker to access sensitive device operations.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7