CVE-2026-100294 — Use of Hard-coded Credentials in Anjvision YSSD-RTMP-H5

CVE-2026-100294

Use of Hard-coded Credentials in Anjvision YSSD-RTMP-H5 PUBLISHED

Description (CNA)

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the firmware embeds hardcoded cloud‑API credentials that are shared across deployed devices. Anyone obtaining the public firmware package can reuse these values to interact with the cloud service in ways not intended for normal operation.

Affected (CNA)

Vendor / product	Versions
Anjvision / YSSD-RTMP-H5	affected Version 3.3.2.4 build 2024-12-26

CWE

CWE-798

References

https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-05

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.