A vulnerability, which was classified as critical, has been found in Yi Technology YI Home Camera 2 2.1.1_20171024151200. The impacted element is an unknown function of the file home/web/ipc of the component CGI Endpoint. Performing a manipulation results in missing authentication.
This vulnerability is known as CVE-2026-4476. Access to the local network is required for this attack. Furthermore, an exploit is available.
The vendor was contacted early about this disclosure but did not respond in any way.
