Is CVE-2026-100295 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-100295?

CVE-2026-100295 has a CVSS v3 severity of MEDIUM (6.3).

Back

CVE-2026-100295

Description

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, an internal debug interface can be enabled through an undocumented pathway, exposing functions not intended for normal operation. When activated, this interface allows actions that could unintentionally provide elevated system access.