CVE-2026-100297

MEDIUM CVSS 5.3 View on NVD ↗

Description

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, an unauthenticated network check function can be triggered to probe arbitrary hosts from the device’s internal network. This may expose internal information or leak data via DNS queries.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

References

https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-05

Published: Sep 29, 2026 20:17 UTC Modified: Sep 29, 2026 22:17 UTC