CVE-2026-116114
LowCVSS 3.7Exploitation Probability (EPSS)
Low risk8th percentile - higher than 8% of all known CVEs
Summary
A weakness was identified in the Yoosee GM8135S Camera version 21.00.01.36 in the /npc/npc file of the Live UDP H.264 Video Stream Handler component. The manipulation causes cleartext transmission of sensitive information. The attack can be initiated remotely, though it is highly complex.
Risk Assessment
Sensitive data, including the video stream, could be intercepted by a network attacker. This may lead to privacy breaches and disclosure of information from the monitored area.
Recommendation
Update the camera firmware once a fix is released and restrict video stream exposure to trusted networks. Consider encrypting transmissions (e.g., VPN or TLS) for video streams.
Other vulnerabilities in Yoosee GM8135S Camera
See all- CVE-2026-116116High
A vulnerability was detected in the Yoosee GM8135S Camera version 21.00.01.36 within the Secure Boot component. Improper verification of cryptographic signatures allows bypassing secure boot. The attack requires local access, and a public exploit is available.
- CVE-2026-116115Low
A security vulnerability was detected in the Yoosee GM8135S Camera version 21.00.01.36 in the wpa_supplicantX.conf file of the WiFi Configuration component. Improper initialization can be exploited by an attacker on the local network. The exploit is publicly disclosed and the attack is highly complex.
Original NVD description (English source)
A weakness has been identified in Yoosee GM8135S Camera 21.00.01.36. This affects an unknown function of the file /npc/npc of the component Live UDP H.264 Video Stream Handler. This manipulation causes cleartext transmission of sensitive information. The attack can be initiated remotely. The attack's complexity is rated as high. The exploitability is reported as difficult. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS