← CVE Intelligence

CVE-2026-100291

Initialization of a resource with an insecure default in Anjvision YSSD-RTMP-H5 PUBLISHED

Description (CNA)

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, several ONVIF service endpoints process management requests without enforcing required authentication. This could allow an unauthorized attacker to access sensitive device operations.

Affected (CNA)

Vendor / productVersions
Anjvision / YSSD-RTMP-H5affected Version 3.3.2.4 build 2024-12-26

CWE

CWE-1188

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.