# CVE-2026-100294: Anjvision YSSD-RTMP-H5 hardcoded credential in firmware

Source: https://junglewise.ai/threats/cve-2026-100294-in-anjvision-yssd-rtmp-h5-firmware-version-3-3-2-4-the-firmware  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-29. Updated: 2026-09-29  
License: CC BY 4.0 with a link back

CVE-2026-100294 · Severity: high · CVSS 7.5 · Published 2026-09-29

Anjvision YSSD-RTMP-H5 is a video streaming device deployed worldwide in commercial facilities. The firmware contains hardcoded cloud API credentials that are identical across all deployed units, allowing anyone with access to the firmware package to impersonate devices and interact with the cloud backend in unauthorized ways, potentially compromising data or service availability.

Technologies: [Anjvision YSSD-RTMP-H5](https://junglewise.ai/threats/technologies/yssd-rtmp-h5). Vendors: [Anjvision](https://junglewise.ai/threats/vendors/anjvision).

## Quick answers

**Is CVE-2026-100294 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-100294 being exploited in the wild.

**How severe is CVE-2026-100294?** High severity, with a CVSS score of 7.5, published 29 September 2026.

**Which products and versions are affected?** Anjvision YSSD-RTMP-H5 3.3.2.4_build_2024-12-26.

**Is there a fix for CVE-2026-100294?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-100294 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-100294?** Check whether you run Anjvision YSSD-RTMP-H5 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The YSSD-RTMP-H5 firmware version 3.3.2.4 embeds shared hardcoded credentials for cloud API authentication (CWE-798). An attacker who obtains the firmware package from public sources can extract these credentials and use them to perform unauthorized cloud API operations, bypassing per-device authentication. No fix has been planned by the vendor.

## Affected products

- Anjvision YSSD-RTMP-H5 3.3.2.4_build_2024-12-26

## Timeline

- 2026-09-29: disclosed

## References

- [https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-05](https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-05)

## Related threats

- [Anjvision YSSD-RTMP-H5 weak cryptography in serial console](https://junglewise.ai/threats/cve-2026-100299-in-anjvision-yssd-rtmp-h5-firmware-version-3-3-2-4-the-device)
- [Anjvision YSSD-RTMP-H5 information disclosure in user endpoints](https://junglewise.ai/threats/cve-2026-100298-in-anjvision-yssd-rtmp-h5-firmware-version-3-3-2-4-two-user)
- [Anjvision YSSD-RTMP-H5 network probe SSRF](https://junglewise.ai/threats/cve-2026-100297-in-anjvision-yssd-rtmp-h5-firmware-version-3-3-2-4-an)
- [Anjvision YSSD-RTMP-H5 privilege escalation in /setUserConfig](https://junglewise.ai/threats/cve-2026-100296-in-anjvision-yssd-rtmp-h5-firmware-version-3-3-2-4-an-empty-body)
- [Anjvision YSSD-RTMP-H5 debug interface exposure](https://junglewise.ai/threats/cve-2026-100295-in-anjvision-yssd-rtmp-h5-firmware-version-3-3-2-4-an-internal)