CVE-2026-100291

Anjvision YSSD-RTMP-H5 firmware 3.3.2.4 processes management requests on several ONVIF service endpoints without enforcing required authentication. An unauthenticated remote attacker who can reach the device over the network can invoke those management operations without credentials. Successful use of the flaw can affect sensitive device operations, with high impact to the confidentiality, integrity, and availability of the device (CVSS 4.0 base score 9.3). Equipment running this firmware is affected when its ONVIF service is network-reachable. No public proof-of-concept is known and the issue is not in CISA KEV, so exploitation in the wild is not known.

What to do: Do not expose the device's ONVIF or management interfaces to the internet; place them on a segmented network and allow access only from trusted management hosts. Check with Anjvision for a firmware update that enforces authentication on the affected ONVIF endpoints and apply it when one is available. Until then, disable unused ONVIF services if the product allows it and watch for unexpected unauthenticated management requests.