← CVE Intelligence

CVE-2026-100297

Server-Side request forgery (SSRF) in Anjvision YSSD-RTMP-H5 PUBLISHED

Description (CNA)

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, an unauthenticated network check function can be triggered to probe arbitrary hosts from the device’s internal network. This may expose internal information or leak data via DNS queries.

Affected (CNA)

Vendor / productVersions
Anjvision / YSSD-RTMP-H5affected Version 3.3.2.4 build 2024-12-26

CWE

CWE-918

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.