Is CVE-2026-100291 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-100291?

CVE-2026-100291 has a CVSS v3 severity of CRITICAL (9.8).

Back

CVE-2026-100291

Description

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, several ONVIF service endpoints process management requests without enforcing required authentication. This could allow an unauthorized attacker to access sensitive device operations.