CVEsYooseeCVE-2026-116116Published Oct 26, 04:00 · Updated Oct 26, 04:00 UTC
8.2
HighCVSS 3.1 · from VulDB
CVE-2026-116116

Yoosee GM8135S Camera Secure Boot signature verification

GM8135S Camera · CWE-347 · CWE-347
AffectedGM8135S Camera
FixNo fix listed yet.
PublishedOct 26, 04:00 · VulDB
ScoredOct 26 · 8.2 · VulDB
Exploit code publicNone known · checked 22:18 UTC
ExploitedNone known · CISA KEV checked 22:30 UTC

What we know

No known exploitation. CISA KEV, checked 22:30 UTC.
No public exploit code known. Exploit-DB, Metasploit, Nuclei, checked 22:18 UTC.
An attacker needs local access to the machine. CVSS: local.
A successful attack can read and change data and take the service down. CVSS: high impact on confidentiality, integrity and availability.

Description

A vulnerability was detected in Yoosee GM8135S Camera 21.00.01.36. Affected is an unknown function of the component Secure Boot. Performing a manipulation results in improper verification of cryptographic signature. The attack needs to be approached locally. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

From VulDB

Affected and fixed versions

ProductAffectedFixed inGM8135S Camera21.00.01.36–

Exploit code

Exploit-DBnone knownMetasploitnone knownNucleinone known

References

VDB-426184 | Yoosee GM8135S Camera Secure Boot signature verification · vuldb.comvdb entryVDB-426184 | CTI Indicators (IOB, IOC) · vuldb.comsignaturepermissions requiredCVE-2026-116116 | CVE Analysis and Report · vuldb.comthird party advisorySubmit #1004712 | Gwelltimes Technology Yoosee Smart Camera GM8135S 21.00.01.36 Insufficient Verification of Data Authenticity · vuldb.comthird party advisoryakosibrylle.me/writeups/yoosee-cve · akosibrylle.meexploit

Other CVEs in GM8135S Camera

All 2 →
3.1Yoosee GM8135S Camera WiFi Configuration wpa_supplicantX.conf initialization · CVE-2026-116115Oct 263.7Yoosee GM8135S Camera Live UDP H.264 Video Stream npc cleartext transmission · CVE-2026-116114Oct 26