Loading story…
Yi Technology's YI Home Camera 2 firmware 2.1.1_20171024151200 was found to contain two high-severity vulnerabilities in home/web/ipc, including hard-coded credentials tracked as CVE-2026-4475 and improper cryptographic signature verification in the HTTP firmware update handler tracked as CVE-2026-4478. The hard-coded credentials issue could allow an attacker with local network access to compromise the device, while the firmware update flaw could enable remote abuse of the update mechanism despite higher attack complexity.
Both issues were publicly disclosed with reports indicating exploit details are available, increasing the risk of real-world abuse against affected cameras. The vulnerabilities are classified under CWE-798/CWE-259 for embedded credentials and CWE-345/CWE-347 for signature verification failures, and the vendor reportedly did not respond after being contacted before disclosure.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
1 event from the most recent confirmed update back to the earliest known activity.
On March 20, 2026, two vulnerabilities affecting Yi Technology YI Home Camera 2 firmware version 2.1.1_20171024151200 were recorded: CVE-2026-4475 for hard-coded credentials in home/web/ipc and CVE-2026-4478 for improper signature verification in the HTTP firmware update handler. Both disclosures noted the vendor had been contacted before publication but did not respond, and both indicated exploit information was publicly available.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Hanwha Vision disclosed patched firmware for two high-severity vulnerabilities affecting its camera and web server components after the flaws were identified by Amazon penetration testing engineers. **CVE-2024-54013** is an authentication bypass issue classified as `CWE-306` that can allow unintended access to protected functions because of a request-handling weakness in a web server component. The company also addressed **CVE-2024-54012**, a command injection flaw classified as `CWE-78`, in which improperly validated input can let specially crafted requests execute malicious commands on affected camera systems. Both CVEs carry CVSS v4.0 ratings indicating high impact to confidentiality, integrity, and availability, and Hanwha Vision directed customers to its advisory for firmware updates, remediation guidance, and available workarounds.
Jun 29, 2026
CISA added two high-severity vulnerabilities affecting specific **Milesight AIOT camera firmware** versions, exposing the devices through embedded secrets in the product. **`CVE-2026-27785`** is a **hard-coded credentials** flaw (`CWE-798`) that can allow unauthorized access without privileges or user interaction, with impact spanning confidentiality, integrity, and availability. The issue was listed with a CVSS v3.1 vector of `AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`, indicating attackers on an adjacent network could exploit the weakness to take control of affected cameras. CISA also published **`CVE-2026-32644`**, a **hard-coded cryptographic key** issue (`CWE-321`) tied to SSL certificates that use default private keys in Milesight camera firmware. That flaw carries a critical CVSS v3.1 vector of `AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`, meaning it is remotely exploitable over the network and could enable full compromise of device communications and operations. The disclosures were accompanied by CISA advisory and CSAF references, as well as vendor firmware download links for affected Milesight products.
Jun 29, 2026
Bitdefender disclosed two serious vulnerabilities in Dahua camera firmware, tracked as **CVE-2025-31700** and **CVE-2025-31701**, that can be exploited by an unauthenticated attacker to achieve remote code execution or trigger denial of service. The flaws affect the **Dahua Hero C1 Smart Camera** and multiple Dahua **IPC, SD, and TPC** camera series, with all firmware released before `2025-04-16` reported as vulnerable. Both vulnerabilities carry a **CVSS 3.1 score of 8.1**, and CSIRT.SK warned that successful exploitation could compromise device integrity and the security of monitored premises. Administrators and camera owners were urged to apply Dahua’s available firmware updates promptly to reduce the risk of takeover or service disruption across exposed surveillance deployments.
Jul 24, 2026