CVE-2026-100291
CRITICAL
NVD
CVSS Score
9.8
Severity
CRITICAL
Published
Sep 29, 2026
Vendor
unknown
Description
In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, several ONVIF service endpoints process management requests without enforcing required authentication. This could allow an unauthorized attacker to access sensitive device operations.