Live › vulnerability › CVE-2026-116116
Go to dashboardThe Yoosee GM8135S camera firmware 21.00.01.36 fails to properly verify the cryptographic signature in its Secure Boot component. An attacker with local access can get modified code accepted at boot.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 04:58 UTC. All times on this page are UTC.
Owners of Yoosee GM8135S cameras running firmware 21.00.01.36 are affected. The attack requires local access to the device, so cameras reachable only over a private network with no physical access are at lower risk. Teams without this model in their fleet can skip it.
No product ranges from the sources yet.
21.00.01.36Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability was detected in Yoosee GM8135S Camera 21.00.01.36. Affected is an unknown function of the component Secure Boot. Performing a manipulation results in improper verification of cryptographic signature. The attack needs to be approached locally. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
This page as .md · .json · in your agent: get_signal("CVE-2026-116116")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.