CVE-2026-116116
Yoosee GM8135S Camera Secure Boot signature verification
Yoosee GM8135S Camera
CVSS
9.3CriticalExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
What fixes it
No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.
Reports 2
2 outlets mention it. Reports are not confirmation; each links to its source.
- @offseq.bsky.social: Yoosee GM8135S Camera (v21.00.01.36) hit by CRITICAL vuln: Secure Boot signature check flaw (CVE-2026-116116)🛡️. Local privileged access needed; public exploits available. RestrictBluesky: CVE posts, 26 Oct 2026
- 🚨 CVE-2026-116116 A vulnerability was detected in Yoosee GM8135S Camera 21.00.01.36. Affected is an unknown function of the component Secure Boot. Performing a manipulation results in improper verificTelegram: CVE Notify, 26 Oct 2026
Description
A vulnerability was detected in Yoosee GM8135S Camera 21.00.01.36. Affected is an unknown function of the component Secure Boot. Performing a manipulation results in improper verification of cryptographic signature. The attack needs to be approached locally. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Text from CVE List
Affected versions 1
- GM8135S Cameraaffected: 21.00.01.36CVE List