CVE-2026-116114
Yoosee GM8135S Camera Live UDP H.264 Video Stream npc cleartext transmission
Yoosee GM8135S Camera
CVSS
6.3MediumExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
What fixes it
No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.
Reports 2
2 outlets mention it. Reports are not confirmation; each links to its source.
- @cve.skyfleet.blue: CVE-2026-116114 - Yoosee GM8135S Camera Live UDP H.264 Video Stream npc cleartext transmission CVE ID : CVE-2026-116114 Published : Oct. 26, 2026, 3:30 a.m. | 30 minutes ago DescriBluesky: CVE posts, 26 Oct 2026
- 🚨 CVE-2026-116114 A weakness has been identified in Yoosee GM8135S Camera 21.00.01.36. This affects an unknown function of the file /npc/npc of the component Live UDP H.264 Video Stream Handler. This Telegram: CVE Notify, 26 Oct 2026
Description
A weakness has been identified in Yoosee GM8135S Camera 21.00.01.36. This affects an unknown function of the file /npc/npc of the component Live UDP H.264 Video Stream Handler. This manipulation causes cleartext transmission of sensitive information. The attack can be initiated remotely. The attack's complexity is rated as high. The exploitability is reported as difficult. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Text from CVE List
Affected versions 1
- GM8135S Cameraaffected: 21.00.01.36CVE List