Is CVE-2026-100294 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-100294?

CVE-2026-100294 has a CVSS v3 severity of HIGH (7.5).

Back

CVE-2026-100294

Description

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the firmware embeds hardcoded cloud‑API credentials that are shared across deployed devices. Anyone obtaining the public firmware package can reuse these values to interact with the cloud service in ways not intended for normal operation.