CVEsYooseeCVE-2026-116115Published Oct 26, 03:45 · Updated Oct 29, 20:47 UTC
3.1
LowCVSS 3.1 · from VulDB
CVE-2026-116115

Yoosee GM8135S Camera WiFi Configuration wpa_supplicantX.conf initialization

GM8135S Camera · CWE-665 · CWE-665
AffectedGM8135S Camera
FixNo fix listed yet.
PublishedOct 26, 03:45 · VulDB
ScoredOct 26 · 3.1 · VulDB
Exploit code publicNone known · checked 21:18 UTC
ExploitedNone known · CISA KEV checked 22:05 UTC

What we know

No known exploitation. CISA KEV, checked 22:05 UTC.
No public exploit code known. Exploit-DB, Metasploit, Nuclei, checked 21:18 UTC.
An attacker has to be on the same network. CVSS: adjacent network.
It only works under certain conditions, which makes it harder to pull off. CVSS: high attack complexity.

Description

A security vulnerability has been detected in Yoosee GM8135S Camera 21.00.01.36. This impacts an unknown function of the file wpa_supplicantX.conf of the component WiFi Configuration. Such manipulation leads to improper initialization. The attack can only be initiated within the local network. This attack is characterized by high complexity. The exploitability is said to be difficult. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

From VulDB

Affected and fixed versions

ProductAffectedFixed inGM8135S Camera21.00.01.36–

Exploit code

Exploit-DBnone knownMetasploitnone knownNucleinone known

References

VDB-426183 | Yoosee GM8135S Camera WiFi Configuration wpa_supplicantX.conf initialization · vuldb.comvdb entryVDB-426183 | CTI Indicators (IOB, IOC, IOA) · vuldb.comsignaturepermissions requiredCVE-2026-116115 | CVE Analysis and Report · vuldb.comthird party advisorySubmit #1004711 | Gwelltimes Technology Yoosee Smart Camera GM8135S 21.00.01.36 Insecure Default Initialization of Resource · vuldb.comthird party advisoryakosibrylle.me/writeups/yoosee-cve · akosibrylle.meexploit

Other CVEs in GM8135S Camera

All 2 →
8.2Yoosee GM8135S Camera Secure Boot signature verification · CVE-2026-116116Oct 263.7Yoosee GM8135S Camera Live UDP H.264 Video Stream npc cleartext transmission · CVE-2026-116114Oct 26