Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-100294

Use of Hard-coded Credentials in Anjvision YSSD-RTMP-H5

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the firmware embeds hardcoded cloud‑API credentials that are shared across deployed devices. Anyone obtaining the public firmware package can reuse these values to interact with the cloud service in ways not intended for normal operation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Anjvision YSSD-RTMP-H5

Default version status: unaffected

  • Version 3.3.2.4 build 2024-12-26affected

References