PT-2026-49112 · Unknown · Galayou Y4

0Xd0 · Published 2026-06-14 · Updated 2026-06-15 · CVE-2026-12192

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GALAYOU Y4 version 1.0.0

Description A buffer overflow occurs in the Web Server component due to the manipulation of an unknown function. This issue is exploitable only within the local network.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-120

CWE-119

Related Identifiers

CVE-2026-12192

Affected Products

Galayou Y4

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-12192 · Security Note
• https://twitter.com/vuldb/status/2066059114921509370 · Twitter Post
• https://vuldb.com/submit/825801 · Note
• https://vuldb.com/vuln/370838/cti · Note
• https://vuldb.com/vuln/370838 · Note
• https://vuldb.com/cve/CVE-2026-12192 · Note