CVE-2026-100294: Anjvision Yssd-Rtmp-h5

High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days.

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the firmware embeds hardcoded cloud‑API credentials that are shared across deployed devices. Anyone obtaining the public firmware package can reuse these values to interact with the cloud service in ways not intended for normal operation.

Affected products

• Anjvision Yssd-Rtmp-h5: version 3.3.2.4 build 2024-12-26 only

Published 2026-09-29. Last modified 2026-09-29.