Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 21:08:02 +0000 CVE-2026-100293 — Improper verification of cryptographic signature in Anjvision YSSD-RTMP-H5 https://vulnerability.circl.lu/vuln/cve-2026-100293 <p><strong>Affected:</strong> Anjvision YSSD-RTMP-H5</p> <p>In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, both the local and cloud update mechanisms apply new firmware without any cryptographic verification, relying only on basic hashing. This design allows an attacker who can reach the update routine to introduce untrusted firmware images that the device will accept as valid.</p> <p><strong>Affected:</strong> Anjvision YSSD-RTMP-H5</p> <p>In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, both the local and cloud update mechanisms apply new firmware without any cryptographic verification, relying only on basic hashing. This design allows an attacker who can reach the update routine to introduce untrusted firmware images that the device will accept as valid.</p> https://vulnerability.circl.lu/vuln/cve-2026-100293