CVE-2026-12192
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk34th percentile - higher than 34% of all known CVEs
Summary
A vulnerability was identified in GALAYOU Y4 version 1.0.0 affecting an unknown function of the Web Server component. This manipulation leads to a buffer overflow.
Risk Assessment
The attack is only possible within the local network, but the public disclosure of the exploit increases the risk of exploitation by third parties.
Recommendation
It is recommended to monitor the local network and implement appropriate security measures to minimize the risk of an attack.
Original NVD description (English source)
A vulnerability was determined in GALAYOU Y4 1.0.0. Impacted is an unknown function of the component Web Server. This manipulation causes buffer overflow. The attack is only possible within the local network. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.