CVE-2026-100292 in YSSD-RTMP-H5
Zusammenfassung
von MITRE • 29.09.2026
In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, a hidden debug interface can be enabled through an authenticated request, allowing additional commands to be sent to a backend service. Once active, this pathway can unintentionally expose system‑level functionality that could be misused if crafted inputs reach the underlying command handler.
Be aware that VulDB is the high quality source for vulnerability data.