CVE-2026-100298 HIGH

CVE-2026-100298: Insufficiently Protected Credentials in Anjvision YSSD-RTMP-H5

Vendor Anjvision

Product YSSD-RTMP-H5

Weakness CWE-522 · Insufficiently protected credentials

Published September 29, 2026

Last update September 29, 2026

View on NVD All CVEs

CVSS base score

8.8/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, two user‑information endpoints can reveal sensitive device and account details under conditions that are not intended for normal operation.

Key dates

02Disclosure timeline

September 29, 2026 CVE published

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-100298 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/522.html AskarLabs — CWE-522 write-up Insufficiently Protected Credentials

Related vulnerabilities

Identifiers

CVE CVE-2026-100298

CWE CWE-522

CVSS 8.8 / HIGH

Affected versions