CVE-2026-100295: CWE-489 Active debug code in Anjvision YSSD-RTMP-H5
In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, an internal debug interface can be enabled through an undocumented pathway, exposing functions not intended for normal operation. When activated, this interface allows actions that could unintentionally provide elevated system access.
AI Analysis
Technical Summary
CVE-2026-100295 describes a vulnerability in Anjvision YSSD-RTMP-H5 firmware version 3.3.2.4 where an internal debug interface can be enabled through an undocumented pathway. This interface exposes functions that are not meant for normal operation, potentially allowing elevated system access if activated. The vulnerability is categorized under CWE-489 (Active Debug Code). No patch or remediation information is provided, and there are no known exploits in the wild.
Potential Impact
If the undocumented debug interface is enabled, attackers with some level of access could leverage it to perform actions that may lead to elevated system privileges. This could compromise confidentiality, integrity, and availability of the affected device. However, exploitation requires enabling the debug interface, which is not accessible by default.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the device's management interfaces to trusted users only and monitor for any unauthorized attempts to enable debug functions.
CVE-2026-100295: CWE-489 Active debug code in Anjvision YSSD-RTMP-H5
Description
In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, an internal debug interface can be enabled through an undocumented pathway, exposing functions not intended for normal operation. When activated, this interface allows actions that could unintentionally provide elevated system access.
CVSS v3.1
Score 6.3medium
Affected software
Anjvision
YSSD-RTMP-H5
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-100295 describes a vulnerability in Anjvision YSSD-RTMP-H5 firmware version 3.3.2.4 where an internal debug interface can be enabled through an undocumented pathway. This interface exposes functions that are not meant for normal operation, potentially allowing elevated system access if activated. The vulnerability is categorized under CWE-489 (Active Debug Code). No patch or remediation information is provided, and there are no known exploits in the wild.
Potential Impact
If the undocumented debug interface is enabled, attackers with some level of access could leverage it to perform actions that may lead to elevated system privileges. This could compromise confidentiality, integrity, and availability of the affected device. However, exploitation requires enabling the debug interface, which is not accessible by default.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the device's management interfaces to trusted users only and monitor for any unauthorized attempts to enable debug functions.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- icscert
- Date Reserved
- 2026-09-25T17:42:35.995Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6abc2561680226ef684413eb
Added to database: 09/29/2026, 20:53:53 UTC
Last enriched: 09/29/2026, 21:51:51 UTC
Last updated: 09/30/2026, 03:03:21 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.