---
id: "CVE-2026-116115"
kind: "vulnerability"
aliases: ["CVE-2026-116115"]
title: "Yoosee GM8135S camera: WiFi config file improperly initialized, local network attack"
severity: "low"
cvss: 3.1
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["gm8135s", "infrastructure", "iot", "wifi", "yoosee-camera"]
not_affected_if: ["internet-isolated-network", "other-firmware"]
published_at: "2026-10-26T04:17:54+00:00"
first_seen_at: "2026-10-26T04:58:33+00:00"
updated_at: "2026-10-26T04:59:40+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-116115", "first_seen_at": "2026-10-26T04:58:33+00:00"}]
---

# Yoosee GM8135S camera: WiFi config file improperly initialized, local network attack

The Yoosee GM8135S camera firmware 21.00.01.36 mishandles its wpa_supplicantX.conf WiFi configuration file because of improper initialization. A attacker on the same local network can manipulate it, though the sources describe the attack as highly complex and difficult to exploit.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the camera's firmware version in its web or app settings and compare it to `21.00.01.36`
- unknown

## Fix

- unknown: the sources do not name a patched firmware version, and the vendor did not respond to disclosure

## Timeline

- 2026-10-26T04:58:33+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-116115

## From the sources

A security vulnerability has been detected in Yoosee GM8135S Camera 21.00.01.36. This impacts an unknown function of the file wpa_supplicantX.conf of the component WiFi Configuration. Such manipulation leads to improper initialization. The attack can only be initiated within the local network. This attack is characterized by high complexity. The exploitability is said to be difficult. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_