What is CVE-2026-4477?

CVE-2026-4477 is a low-severity vulnerability in Yi Technology Home Camera, classified under CWE-320. CVSS score: 3.1/10. Published 2026-03-20.

How severe is CVE-2026-4477?

Low severity. CVSS v3 base score is 3.1 out of 10.

Vulnerability in Yi Technology Home Camera

CVE-2026-4477

A vulnerability was determined in Yi Technology YI Home Camera 2 2.1.1_20171024151200. This affects an unknown function of the component WPA/WPS. Executing a manipulation can lead to use of hard-coded cryptographic key . The attack can only be done within the local network. This attack is characterized by high complexity. The exploitability is reported as difficult. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

EPSS: 0.002 (12.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.1 (Low). Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Yi Technology Home Camera — versions 2 2.1.1_20171024151200

Weakness classification (CWE)

References

cna@vuldb.com (vdb-entry)
cna@vuldb.com (signature, permissions-required)
cna@vuldb.com (third-party-advisory)

Frequently asked questions

What is CVE-2026-4477?: CVE-2026-4477 is a low-severity vulnerability in Yi Technology Home Camera, classified under CWE-320. CVSS score: 3.1/10. Published 2026-03-20.
How severe is CVE-2026-4477?: Low severity. CVSS v3 base score is 3.1 out of 10.