[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-100291":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-29T18:07:57.517Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":228,"aliases":229,"duplicate_of":9,"upstream":230,"downstream":231,"duplicates":232,"related":233,"reserved_at":9,"published_at":234,"modified_at":235,"state":236,"summary":237,"references_raw":244,"kevs":251,"epss":9,"epss_history":252,"metrics":253,"affected":265},"CVE-2026-100291","In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, several ONVIF service endpoints process management requests without enforcing required authentication. This could allow an unauthorized attacker to access sensitive device operations.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-1188","Initialization of a Resource with an Insecure Default","The product initializes or sets a resource with a default that is intended to be changed by the product's installer, administrator, or maintainer, but the default is not secure.","weakness","Incomplete","Base",[19],{"id":20,"name":21,"techniques":22},"CAPEC-665","Exploitation of Thunderbolt Protection Flaws",[23,60,100],{"id":24,"name":25,"tactics":26,"countermeasures":33},"T1211","Exploitation for Stealth",[27,30],{"id":28,"name":29},"TA0030","Defense Evasion",{"id":31,"name":32},"TA0005","Stealth",[34,39,44,48,52,56],{"id":35,"name":36,"tactic":37},"D3-PSEP","Process Segment Execution Prevention",{"name":38},"Harden",{"id":40,"name":41,"tactic":42},"D3-MBT","Memory Boundary Tracking",{"name":43},"Detect",{"id":45,"name":46,"tactic":47},"D3-PCSV","Process Code Segment Verification",{"name":43},{"id":49,"name":50,"tactic":51},"D3-SFCV","Stack Frame Canary Validation",{"name":38},{"id":53,"name":54,"tactic":55},"D3-SSC","Shadow Stack Comparisons",{"name":43},{"id":57,"name":58,"tactic":59},"D3-SAOR","Segment Address Offset Randomization",{"name":38},{"id":61,"name":62,"tactics":63,"countermeasures":69},"T1542.002","Component Firmware",[64,65,66],{"id":28,"name":29},{"id":31,"name":32},{"id":67,"name":68},"TA0110","Persistence",[70,74,78,82,86,91,96],{"id":71,"name":72,"tactic":73},"D3-FEMC","Firmware Embedded Monitoring Code",{"name":43},{"id":75,"name":76,"tactic":77},"D3-FV","Firmware Verification",{"name":43},{"id":79,"name":80,"tactic":81},"D3-FBA","Firmware Behavior Analysis",{"name":43},{"id":83,"name":84,"tactic":85},"D3-SU","Software Update",{"name":38},{"id":87,"name":88,"tactic":89},"D3-SWI","Software Inventory",{"name":90},"Model",{"id":92,"name":93,"tactic":94},"D3-RS","Restore Software",{"name":95},"Restore",{"id":97,"name":98,"tactic":99},"D3-AVE","Asset Vulnerability Enumeration",{"name":90},{"id":101,"name":102,"tactics":103,"countermeasures":112},"T1556","Modify Authentication Process",[104,105,108,109],{"id":28,"name":29},{"id":106,"name":107},"TA0112","Defense Impairment",{"id":67,"name":68},{"id":110,"name":111},"TA0031","Credential Access",[113,118,122,127,131,135,139,143,147,151,155,159,163,167,172,176,180,184,188,192,196,200,204,208,212,216,220,224],{"id":114,"name":115,"tactic":116},"D3-LFP","Local File Permissions",{"name":117},"Isolate",{"id":119,"name":120,"tactic":121},"D3-HBPI","Hardware-based Process Isolation",{"name":117},{"id":123,"name":124,"tactic":125},"D3-FEV","File Eviction",{"name":126},"Evict",{"id":128,"name":129,"tactic":130},"D3-HS","Host Shutdown",{"name":126},{"id":132,"name":133,"tactic":134},"D3-PSMD","Process Self-Modification Detection",{"name":43},{"id":136,"name":137,"tactic":138},"D3-CQ","Content Quarantine",{"name":117},{"id":140,"name":141,"tactic":142},"D3-ABPI","Application-based Process Isolation",{"name":117},{"id":144,"name":145,"tactic":146},"D3-SFA","System File Analysis",{"name":43},{"id":148,"name":149,"tactic":150},"D3-PT","Process Termination",{"name":126},{"id":152,"name":153,"tactic":154},"D3-SCF","System Call Filtering",{"name":117},{"id":156,"name":157,"tactic":158},"D3-AM","Access Modeling",{"name":90},{"id":160,"name":161,"tactic":162},"D3-RC","Restore Configuration",{"name":95},{"id":164,"name":165,"tactic":166},"D3-FE","File Encryption",{"name":38},{"id":168,"name":169,"tactic":170},"D3-DF","Decoy File",{"name":171},"Deceive",{"id":173,"name":174,"tactic":175},"D3-FIM","File Integrity Monitoring",{"name":43},{"id":177,"name":178,"tactic":179},"D3-CF","Content Filtering",{"name":117},{"id":181,"name":182,"tactic":183},"D3-FA","File Analysis",{"name":43},{"id":185,"name":186,"tactic":187},"D3-WSAM","Web Session Access Mediation",{"name":117},{"id":189,"name":190,"tactic":191},"D3-CI","Configuration Inventory",{"name":90},{"id":193,"name":194,"tactic":195},"D3-RF","Restore File",{"name":95},{"id":197,"name":198,"tactic":199},"D3-PSA","Process Spawn Analysis",{"name":43},{"id":201,"name":202,"tactic":203},"D3-PLA","Process Lineage Analysis",{"name":43},{"id":205,"name":206,"tactic":207},"D3-RFAM","Remote File Access Mediation",{"name":117},{"id":209,"name":210,"tactic":211},"D3-CM","Content Modification",{"name":117},{"id":213,"name":214,"tactic":215},"D3-NTPM","Network Traffic Policy Mapping",{"name":90},{"id":217,"name":218,"tactic":219},"D3-KBPI","Kernel-based Process Isolation",{"name":117},{"id":221,"name":222,"tactic":223},"D3-PS","Process Suspension",{"name":126},{"id":225,"name":226,"tactic":227},"D3-HR","Host Reboot",{"name":126},[],[],[],[],[],[],"2026-09-29T19:34:23.631Z","2026-09-29T21:01:58.729Z","Deferred",{"cisa_kev":238,"cisa_ransomware":238,"cisa_vendor":9,"epss_severity":9,"epss_score":9,"severity":239,"severity_score":240,"severity_version":241,"severity_source":242,"severity_vector":243,"severity_status":236},false,"critical",9.8,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",[245],{"url":246,"sources":247,"tags":249},"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-05",[242,248],"nvd",[250],"Government Resource",[],[],[254,261],{"source":242,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":255,"cvss_v4_0":258},{"baseScore":240,"baseSeverity":256,"vectorString":243,"impactScore":240,"exploitabilityScore":257},"CRITICAL",10,{"baseScore":259,"baseSeverity":256,"vectorString":260,"impactScore":9,"exploitabilityScore":9},9.3,"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",{"source":248,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":262,"cvss_v4_0":263},{"baseScore":240,"baseSeverity":256,"vectorString":243,"impactScore":240,"exploitabilityScore":257},{"baseScore":259,"baseSeverity":256,"vectorString":264,"impactScore":9,"exploitabilityScore":9},"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",[266],{"ecosystem":9,"name":267,"vendor":268,"product":269,"cpe_part":270,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":271},"YSSD-RTMP-H5","anjvision","yssd-rtmp-h5","a",[272],{"version":273,"is_range":238,"range_type":242,"version_start":273,"version_start_type":274,"version_end":273,"version_end_type":274,"fixed_in":9},"Version 3.3.2.4 build 2024-12-26","including"]