CVE-2026-116116
HighCVSS 8.2Exploitation Probability (EPSS)
Low risk0th percentile - higher than 0% of all known CVEs
Summary
A vulnerability was detected in the Yoosee GM8135S Camera version 21.00.01.36 within the Secure Boot component. Improper verification of cryptographic signatures allows bypassing secure boot. The attack requires local access, and a public exploit is available.
Risk Assessment
An attacker with physical or local access to the camera could load unsigned firmware and take control of the device. This may lead to malware installation and compromise of device integrity.
Recommendation
Restrict physical and local access to cameras and apply firmware updates once the vendor releases them. Until a fix is available, consider network segmentation and IoT device monitoring.
Other vulnerabilities in Yoosee GM8135S Camera
See all- CVE-2026-116115Low
A security vulnerability was detected in the Yoosee GM8135S Camera version 21.00.01.36 in the wpa_supplicantX.conf file of the WiFi Configuration component. Improper initialization can be exploited by an attacker on the local network. The exploit is publicly disclosed and the attack is highly complex.
- CVE-2026-116114Low
A weakness was identified in the Yoosee GM8135S Camera version 21.00.01.36 in the /npc/npc file of the Live UDP H.264 Video Stream Handler component. The manipulation causes cleartext transmission of sensitive information. The attack can be initiated remotely, though it is highly complex.
Original NVD description (English source)
A vulnerability was detected in Yoosee GM8135S Camera 21.00.01.36. Affected is an unknown function of the component Secure Boot. Performing a manipulation results in improper verification of cryptographic signature. The attack needs to be approached locally. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS