CVE-2026-116116: Yoosee GM8135S Camera Secure Boot signature verification
A vulnerability was detected in Yoosee GM8135S Camera 21.00.01.36. Affected is an unknown function of the component Secure Boot. Performing a manipulation results in improper verification of cryptographic signature. The attack needs to be approached locally. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Systems using Yoosee GM8135S Camera version 21.00.01.36 are identified as affected. Exploitation requires local access to the device.
What access does an attacker need?
The published severity vector indicates high privileges are required and no user interaction is needed. The attack is local rather than network-based.
Is there public exploit availability?
Yes. The vulnerability information states that a public exploit exists and may be used.
Is a vendor fix available?
The available information does not identify a fix. It states that the vendor was contacted before disclosure but did not respond.