{"id":"CVE-2026-116116","kind":"vulnerability","aliases":["CVE-2026-116116"],"related":[],"title":"Yoosee GM8135S camera: Secure Boot accepts improperly verified signatures, allowing firmware tampering","description":"A vulnerability was detected in Yoosee GM8135S Camera 21.00.01.36. Affected is an unknown function of the component Secure Boot. Performing a manipulation results in improper verification of cryptographic signature. The attack needs to be approached locally. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","summary":"The Yoosee GM8135S camera firmware 21.00.01.36 fails to properly verify the cryptographic signature in its Secure Boot component. An attacker with local access can get modified code accepted at boot.","severity":"high","cvss":8.4,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["camera","firmware","gm8135s","infrastructure","iot","yoosee"],"not_affected_if":["no-device-access","other-firmware-version"],"how_to_check":"- Read the firmware version on the device and compare it to `21.00.01.36`\n- unknown for other checks; the sources do not describe a configuration to inspect","fix":"- unknown: the vendor did not respond to disclosure and the sources list no patched version or workaround","status":"open","published_at":"2026-10-26T04:17:55+00:00","first_seen_at":"2026-10-26T04:58:33+00:00","triaged_at":"2026-10-26T04:59:40+00:00","updated_at":"2026-10-26T04:59:40+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-26T04:59:40Z","model":"claude-haiku-5-5","output":{"fix":"- unknown: the vendor did not respond to disclosure and the sources list no patched version or workaround","reach":"local","title":"Yoosee GM8135S camera: Secure Boot accepts improperly verified signatures, allowing firmware tampering","impact":"high","summary":"The Yoosee GM8135S camera firmware 21.00.01.36 fails to properly verify the cryptographic signature in its Secure Boot component. An attacker with local access can get modified code accepted at boot.","category":"infrastructure","nicknames":[],"who_cares":["iot","camera","firmware","yoosee","gm8135s"],"confidence":0.6,"needs_auth":"unknown","worst_case":"Attacker runs modified firmware on the camera at boot","analyst_note":"Check NVD and the CVE record for the affected firmware scope and any vendor or community fix; confirm whether a public exploit exists before raising priority.","how_to_check":"- Read the firmware version on the device and compare it to `21.00.01.36`\n- unknown for other checks; the sources do not describe a configuration to inspect","needs_analyst":true,"not_affected_if":["other-firmware-version","no-device-access"],"who_is_affected":"Owners of Yoosee GM8135S cameras running firmware 21.00.01.36 are affected. The attack requires local access to the device, so cameras reachable only over a private network with no physical access are at lower risk. Teams without this model in their fleet can skip it.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000603,"input_tokens":3332,"output_tokens":540,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-116116':15A,18A '-2026':14A,17A '21.00.01.36':30B,63C 'accept':6A,52B 'access':47B 'affect':64C 'allow':10A 'approach':89C 'attack':44B,85C 'boot':5A,41B,54B,73C 'camera':3A,19B,28B,62C 'code':51B 'compon':42B,71C 'contact':103C 'cryptograph':36B,82C 'cve':13A,16A 'detect':58C 'disclosur':107C 'earli':104C 'exploit':92C 'fail':31B 'firmwar':11A,20B,29B 'function':68C 'get':49B 'gm8135s':2A,21B,27B,61C 'improp':7A,79C 'infrastructur':22B 'iot':23B 'local':46B,90C 'manipul':76C 'may':97C 'modifi':50B 'need':86C 'perform':74C 'proper':33B 'public':95C 'respond':111C 'result':77C 'secur':4A,40B,72C 'signatur':9A,37B,83C 'tamper':12A 'unknown':67C 'use':99C 'vendor':101C 'verif':80C 'verifi':8A,34B 'vulner':56C 'way':114C 'yoose':1A,24B,26B,60C","nicknames":[],"mitigations":[],"who_affected":"Owners of Yoosee GM8135S cameras running firmware 21.00.01.36 are affected. The attack requires local access to the device, so cameras reachable only over a private network with no physical access are at lower risk. Teams without this model in their fleet can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T04:17:55+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"cna@vuldb.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-116116","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116116","severity":null,"published_at":"2026-10-26T04:17:55+00:00","modified_at":"2026-10-26T04:17:55+00:00","first_seen_at":"2026-10-26T04:58:33+00:00","fetched_at":"2026-10-26T04:58:33+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}