CVE-2026-4478 - Vulnerability Analysis

Overview

Yi Technology YI Home Camera 2 2.1.1_20171024151200 contains a broken authentication caused by improper verification of cryptographic signature in HTTP Firmware Update Handler, letting remote attackers bypass authentication, exploit requires high attack complexity.

Severity & Score

Impact

Remote attackers can bypass authentication, potentially leading to unauthorized access or control of the device.

Mitigation

Update to the latest firmware version provided by the vendor.

References

• https://vuldb.com/?submit.773162
• https://vuldb.com/?ctiid.351768
• https://vuldb.com/?id.351768

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 20, 2026

🟠 CVE-2026-4478 - High (8.1) A vulnerability was identified in Yi Technology YI Home Camera 2 2.1.1_20171024151200. This impacts an unknown function of the file home/web/ipc of the component HTTP Firmware Update Handler. The manipulation leads to improper verification of cryp... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-4478/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner