What is CVE-2026-4476?

CVE-2026-4476 is a medium-severity vulnerability in Yi Technology Home Camera, classified under Improper Authentication. CVSS score: 6.3/10. Published 2026-03-20.

How severe is CVE-2026-4476?

Medium severity. CVSS v3 base score is 6.3 out of 10.

Auth bypass in Yi Technology Home Camera

CVE-2026-4476

A vulnerability was found in Yi Technology YI Home Camera 2 2.1.1_20171024151200. The impacted element is an unknown function of the file home/web/ipc of the component CGI Endpoint. Performing a manipulation results in missing authenticati…

Vulnerability class: Broken Authentication

EPSS: 0.000 (1.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L.

Affected products

Yi Technology Home Camera — versions 2 2.1.1_20171024151200

Weakness classification (CWE)

References

VDB-351766 | Yi Technology YI Home Camera CGI Endpoint ipc missing authentication (vdb-entry)
VDB-351766 | CTI Indicators (IOB, IOC, IOA) (signature, permissions-required)
Submit #773070 | yitechnology YI Home Camera 2 2.1.1_20171024151200 Unauthenticated-CGI-Endpoints (third-party-advisory)

Frequently asked questions

What is CVE-2026-4476?: CVE-2026-4476 is a medium-severity vulnerability in Yi Technology Home Camera, classified under Improper Authentication. CVSS score: 6.3/10. Published 2026-03-20.
How severe is CVE-2026-4476?: Medium severity. CVSS v3 base score is 6.3 out of 10.