What’s Vulnerable › Vulnerabilities

CVE-2026-4478: Yi Technology YI Home Camera HTTP Firmware Update ipc signature verification

• Severity: high (CVSS 8.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-03-20 · updated 2026-06-17
• Weakness: CWE-345

Description

A vulnerability was identified in Yi Technology YI Home Camera 2 2.1.1_20171024151200. This impacts an unknown function of the file home/web/ipc of the component HTTP Firmware Update Handler. The manipulation leads to improper verification of cryptographic signature. The attack is possible to be carried out remotely. The complexity of an attack is rather high. The exploitability is said to be difficult. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

• Yi Technology YI Home Camera: 2 2.1.1_20171024151200

References

• https://vuldb.com/?ctiid.351768
• https://vuldb.com/?id.351768
• https://vuldb.com/?submit.773162

Get alerted when CVE-2026-4478 or the next vulnerability affects your stack