Missing Authentication Vulnerability in Yi Technology YI Home Camera 2

CVE-2026-4476

What is CVE-2026-4476?

A security vulnerability has been identified in the Yi Technology YI Home Camera 2, specifically in the CGI Endpoint component. This issue arises from missing authentication controls in an unknown function of the file home/web/ipc. Access to the local network is a prerequisite for exploiting this vulnerability, which could allow unauthorized manipulation and access to the camera's functionalities. The vendor has been informed about the discovery, but there has been no response to address the issue.

References