{"id":"CVE-2026-116115","kind":"vulnerability","aliases":["CVE-2026-116115"],"related":[],"title":"Yoosee GM8135S camera: WiFi config file improperly initialized, local network attack","description":"A security vulnerability has been detected in Yoosee GM8135S Camera 21.00.01.36. This impacts an unknown function of the file wpa_supplicantX.conf of the component WiFi Configuration. Such manipulation leads to improper initialization. The attack can only be initiated within the local network. This attack is characterized by high complexity. The exploitability is said to be difficult. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","summary":"The Yoosee GM8135S camera firmware 21.00.01.36 mishandles its wpa_supplicantX.conf WiFi configuration file because of improper initialization. A attacker on the same local network can manipulate it, though the sources describe the attack as highly complex and difficult to exploit.","severity":"low","cvss":3.1,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["gm8135s","infrastructure","iot","wifi","yoosee-camera"],"not_affected_if":["internet-isolated-network","other-firmware"],"how_to_check":"- Check the camera's firmware version in its web or app settings and compare it to `21.00.01.36`\n- unknown","fix":"- unknown: the sources do not name a patched firmware version, and the vendor did not respond to disclosure","status":"open","published_at":"2026-10-26T04:17:54+00:00","first_seen_at":"2026-10-26T04:58:33+00:00","triaged_at":"2026-10-26T04:59:40+00:00","updated_at":"2026-10-26T04:59:40+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-26T04:59:40Z","model":"claude-haiku-5-5","output":{"fix":"- unknown: the sources do not name a patched firmware version, and the vendor did not respond to disclosure","reach":"network","title":"Yoosee GM8135S camera: WiFi config file improperly initialized, local network attack","impact":"medium","summary":"The Yoosee GM8135S camera firmware 21.00.01.36 mishandles its wpa_supplicantX.conf WiFi configuration file because of improper initialization. A attacker on the same local network can manipulate it, though the sources describe the attack as highly complex and difficult to exploit.","category":"infrastructure","nicknames":[],"who_cares":["iot","yoosee-camera","gm8135s","wifi"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Attacker on local network manipulates camera WiFi configuration","analyst_note":"Find the vendor advisory or the public exploit write-up for the wpa_supplicantX.conf flaw to confirm the attack path, impact and any patched firmware.","how_to_check":"- Check the camera's firmware version in its web or app settings and compare it to `21.00.01.36`\n- unknown","needs_analyst":true,"not_affected_if":["other-firmware","internet-isolated-network"],"who_is_affected":"Owners of Yoosee GM8135S cameras running firmware 21.00.01.36 on a local network. Devices on networks with no untrusted users or devices may be lower risk. Cameras from other models or firmware builds are not described by the sources.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000613,"input_tokens":3379,"output_tokens":551,"severity_before":"low"},"analyst_status":null,"analyst_note":null,"search":"'-116115':14A,17A '-2026':13A,16A '21.00.01.36':30B,74C 'attack':11A,42B,56B,96C,106C 'camera':3A,24B,28B,73C 'character':108C 'complex':59B,111C 'compon':86C 'config':5A 'configur':35B,88C 'contact':132C 'cve':12A,15A 'describ':54B 'detect':69C 'difficult':61B,118C 'disclos':123C 'disclosur':136C 'earli':133C 'exploit':63B,113C,120C 'file':6A,36B,82C 'firmwar':29B 'function':79C 'gm8135s':2A,18B,27B,72C 'high':58B,110C 'impact':76C 'improp':7A,39B,93C 'infrastructur':19B 'initi':8A,40B,94C,100C 'iot':20B 'lead':91C 'local':9A,46B,103C 'manipul':49B,90C 'may':126C 'mishandl':31B 'network':10A,47B,104C 'public':124C 'respond':140C 'said':115C 'secur':65C 'sourc':53B 'though':51B 'unknown':78C 'use':128C 'vendor':130C 'vulner':66C 'way':143C 'wifi':4A,21B,34B,87C 'within':101C 'wpa_supplicantx.conf':33B,83C 'yoose':1A,23B,26B,71C 'yoosee-camera':22B","nicknames":[],"mitigations":[],"who_affected":"Owners of Yoosee GM8135S cameras running firmware 21.00.01.36 on a local network. Devices on networks with no untrusted users or devices may be lower risk. Cameras from other models or firmware builds are not described by the sources.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T04:17:54+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"cna@vuldb.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-116115","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116115","severity":null,"published_at":"2026-10-26T04:17:54+00:00","modified_at":"2026-10-26T04:17:54+00:00","first_seen_at":"2026-10-26T04:58:33+00:00","fetched_at":"2026-10-26T04:58:33+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}