CVE-2026-100295
Deferred
Deferred - Pending Action
Debug Interface Bypass in Anjvision YSSD-RTMP-H5 Firmware
Vulnerability report for CVE-2026-100295, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-09-29
Last updated on: 2026-09-29
Assigner: ICS-CERT
Description
Description
In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, an internal debug interface can be enabled through an undocumented pathway, exposing functions not intended for normal operation. When activated, this interface allows actions that could unintentionally provide elevated system access.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| anjvision | yssd-rtmp-h5 | 3.3.2.4 |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-489 | The product is released with debugging code still enabled or active. |
