PT-2026-26568 · Yi Technology · Yi Home Camera

0Rbitingzer0 + 1 · Published 2026-03-20 · Updated 2026-03-20 · CVE-2026-4475

NVD

CVSS v2.0

8.3

High

AV:A/AC:L/Au:N/C:C/I:C/A:C

A vulnerability has been found in Yi Technology YI Home Camera 2 2.1.1 20171024151200. The affected element is an unknown function of the file home/web/ipc. Such manipulation leads to hard-coded credentials. Access to the local network is required for this attack to succeed. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

CWE-259

Related Identifiers

CVE-2026-4475

Affected Products

Yi Home Camera

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-4475 · Security Note
• https://vuldb.com/?submit.772996 · Note
• https://vuldb.com/?id.351765 · Note
• https://vuldb.com/?ctiid.351765 · Note