Live › vulnerability › CVE-2026-116114
Go to dashboardThe Yoosee GM8135S camera firmware 21.00.01.36 sends sensitive information in cleartext through its Live UDP H.264 video stream handler at /npc/npc. A remote attacker who can observe or reach that traffic can read the data, and a public exploit exists.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 04:58 UTC. All times on this page are UTC.
Owners of Yoosee GM8135S cameras running firmware 21.00.01.36 that are reachable from the internet or an untrusted network. Sources do not say which other firmware versions or models are affected, so the exposure of other units is unknown.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A weakness has been identified in Yoosee GM8135S Camera 21.00.01.36. This affects an unknown function of the file /npc/npc of the component Live UDP H.264 Video Stream Handler. This manipulation causes cleartext transmission of sensitive information. The attack can be initiated remotely. The attack's complexity is rated as high. The exploitability is reported as difficult. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
This page as .md · .json · in your agent: get_signal("CVE-2026-116114")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.