Hard-Coded Credentials Vulnerability in Yi Technology YI Home Camera
CVE-2026-4475

8.7HIGH

Key Information:

Vendor

Yi Technology

Status
Yi Home Camera
Vendor
CVE Published:
20 March 2026

What is CVE-2026-4475?

A vulnerability exists in the YI Home Camera 2 version 2.1.1_20171024151200, where an unknown function in the home/web/ipc file exposes hard-coded credentials. This flaw requires local network access to exploit, potentially allowing unauthorized access to sensitive information. This security issue has been disclosed publicly. Despite early contact, Yi Technology has not responded to inquiries regarding this vulnerability, raising concerns for users dependent on this IoT device.

Affected Version(s)

YI Home Camera 2 2.1.1_20171024151200

References

https://vuldb.com/?id.351765
vdb-entry
https://vuldb.com/?ctiid.351765
signaturepermissions-required
https://vuldb.com/?submit.772996
third-party-advisory

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

0rbitingZer0 (VulDB User)
VulDB
.