CVE-2026-4475HIGH 8.8EPSS p21.4%

CVE-2026-4475CVE-2026-4475

Description

A vulnerability has been found in Yi Technology YI Home Camera 2 2.1.1_20171024151200. The affected element is an unknown function of the file home/web/ipc. Such manipulation leads to hard-coded credentials. Access to the local network is required for this attack to succeed. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Scoring

CVSS 3.18.8 (HIGH)
VectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS0.30% probability of exploitation · percentile 21.4% · 2026-06-19T12:03:05Z
Published2026-03-20
Last modified2026-04-29

Underlying weaknesses· 2

CWE-259CWE-798

References

  1. https://vuldb.com/?ctiid.351765
  2. https://vuldb.com/?id.351765
  3. https://vuldb.com/?submit.772996
  4. https://vuldb.com/?submit.772996

2

TypeTargetConfidenceTier
WeaknessUse of Hard-coded Passwordcwe-2590%live
WeaknessUse of Hard-coded Credentialscwe-7980%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2026-4478
CVE
CVE-2025-29660
CVE
CVE-2025-14749
CVE
CVE-2026-27785
CVE
CVE-2025-29659
CVE
CVE-2026-8598
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.