CVE-2026-116115
LowCVSS 3.1Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
A security vulnerability was detected in the Yoosee GM8135S Camera version 21.00.01.36 in the wpa_supplicantX.conf file of the WiFi Configuration component. Improper initialization can be exploited by an attacker on the local network. The exploit is publicly disclosed and the attack is highly complex.
Risk Assessment
An attacker on the same local network could exploit the improper WiFi configuration, potentially disrupting or hijacking the camera's network connections. Due to high complexity the risk is limited but still relevant in untrusted networks.
Recommendation
Update the camera firmware once the vendor releases a fix and isolate cameras in a dedicated VLAN. Regularly review the WiFi configuration of IoT devices.
Other vulnerabilities in Yoosee GM8135S Camera
See all- CVE-2026-116116High
A vulnerability was detected in the Yoosee GM8135S Camera version 21.00.01.36 within the Secure Boot component. Improper verification of cryptographic signatures allows bypassing secure boot. The attack requires local access, and a public exploit is available.
- CVE-2026-116114Low
A weakness was identified in the Yoosee GM8135S Camera version 21.00.01.36 in the /npc/npc file of the Live UDP H.264 Video Stream Handler component. The manipulation causes cleartext transmission of sensitive information. The attack can be initiated remotely, though it is highly complex.
Original NVD description (English source)
A security vulnerability has been detected in Yoosee GM8135S Camera 21.00.01.36. This impacts an unknown function of the file wpa_supplicantX.conf of the component WiFi Configuration. Such manipulation leads to improper initialization. The attack can only be initiated within the local network. This attack is characterized by high complexity. The exploitability is said to be difficult. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS