CVE-2026-100297: CWE-918 Server-Side request forgery (SSRF) in Anjvision YSSD-RTMP-H5
In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, an unauthenticated network check function can be triggered to probe arbitrary hosts from the device’s internal network. This may expose internal information or leak data via DNS queries.
AI Analysis
Technical Summary
CVE-2026-100297 is a server-side request forgery (SSRF) vulnerability in Anjvision YSSD-RTMP-H5 firmware version 3.3.2.4. The flaw allows an unauthenticated attacker to trigger a network check function that causes the device to send requests to arbitrary hosts on its internal network. This can result in exposure of internal network information or leakage of data through DNS queries. The vulnerability is identified as CWE-918 and has a CVSS 3.1 base score of 5.3, indicating medium severity. There is no vendor advisory or patch information available at this time.
Potential Impact
An unauthenticated attacker can exploit this SSRF vulnerability to make the affected device perform network probes to arbitrary internal hosts. This may expose sensitive internal network information or cause data leakage through DNS queries. There is no indication of direct impact on data integrity or availability.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict network access to the device to trusted users and networks to reduce exposure to unauthenticated attackers.
CVE-2026-100297: CWE-918 Server-Side request forgery (SSRF) in Anjvision YSSD-RTMP-H5
Description
In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, an unauthenticated network check function can be triggered to probe arbitrary hosts from the device’s internal network. This may expose internal information or leak data via DNS queries.
CVSS v3.1
Score 5.3medium
Affected software
Anjvision
YSSD-RTMP-H5
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-100297 is a server-side request forgery (SSRF) vulnerability in Anjvision YSSD-RTMP-H5 firmware version 3.3.2.4. The flaw allows an unauthenticated attacker to trigger a network check function that causes the device to send requests to arbitrary hosts on its internal network. This can result in exposure of internal network information or leakage of data through DNS queries. The vulnerability is identified as CWE-918 and has a CVSS 3.1 base score of 5.3, indicating medium severity. There is no vendor advisory or patch information available at this time.
Potential Impact
An unauthenticated attacker can exploit this SSRF vulnerability to make the affected device perform network probes to arbitrary internal hosts. This may expose sensitive internal network information or cause data leakage through DNS queries. There is no indication of direct impact on data integrity or availability.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict network access to the device to trusted users and networks to reduce exposure to unauthenticated attackers.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- icscert
- Date Reserved
- 2026-09-25T17:42:35.995Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6abc2561680226ef684413ed
Added to database: 09/29/2026, 20:53:53 UTC
Last enriched: 09/29/2026, 21:51:47 UTC
Last updated: 09/30/2026, 03:03:21 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.