Is CVE-2026-100297 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-100297?

CVE-2026-100297 has a CVSS v3 severity of MEDIUM (5.3).

Back

CVE-2026-100297

Description

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, an unauthenticated network check function can be triggered to probe arbitrary hosts from the device’s internal network. This may expose internal information or leak data via DNS queries.