---
id: "CVE-2026-116114"
kind: "vulnerability"
aliases: ["CVE-2026-116114"]
title: "Yoosee GM8135S camera: video stream handler sends sensitive data in cleartext"
severity: "low"
cvss: 3.7
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["firmware", "gm8135s", "infrastructure", "iot-camera", "yoosee"]
not_affected_if: ["no-remote-access", "other-firmware-version"]
published_at: "2026-10-26T04:17:54+00:00"
first_seen_at: "2026-10-26T04:58:33+00:00"
updated_at: "2026-10-26T04:59:40+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-116114", "first_seen_at": "2026-10-26T04:58:33+00:00"}]
---

# Yoosee GM8135S camera: video stream handler sends sensitive data in cleartext

The Yoosee GM8135S camera firmware 21.00.01.36 sends sensitive information in cleartext through its Live UDP H.264 video stream handler at /npc/npc. A remote attacker who can observe or reach that traffic can read the data, and a public exploit exists.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the camera firmware version in its web or app settings; unknown whether the sources give a command or path for this
- Confirm whether the camera's UDP stream traffic crosses networks an attacker could observe

## Fix

- No vendor fix: the vendor did not respond to disclosure
- Isolate the camera on a separate network segment and block remote access to it until a fix exists

## Timeline

- 2026-10-26T04:58:33+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-116114

## From the sources

A weakness has been identified in Yoosee GM8135S Camera 21.00.01.36. This affects an unknown function of the file /npc/npc of the component Live UDP H.264 Video Stream Handler. This manipulation causes cleartext transmission of sensitive information. The attack can be initiated remotely. The attack's complexity is rated as high. The exploitability is reported as difficult. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_