Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
Vulnerability Details :

CVE-2026-0629

Summary
Assigner-TPLink
Assigner Org ID-f23511db-6c3e-4e32-a477-6aa17d310630
Published At-16 Jan, 2026 | 17:24
Updated At-21 Jan, 2026 | 17:53
Rejected At-
Credits

Authentication Bypass in Password Recovery Feature via Local Web App on Multiple VIGI Cameras

Authentication bypass in the password recovery feature of the local web interface across multiple VIGI camera models allows an attacker on the LAN to reset the admin password without verification by manipulating client-side state. Attackers can gain full administrative access to the device, compromising configuration and network security.

Vendors
-
Not available
Products
-
Metrics (CVSS)
VersionBase scoreBase severityVector
Weaknesses
Attack Patterns
Solution/Workaround
References
HyperlinkResource Type
EPSS History
Score
Latest Score
-
N/A
No data available for selected date range
Percentile
Latest Percentile
-
N/A
No data available for selected date range
Stakeholder-Specific Vulnerability Categorization (SSVC)
▼Common Vulnerabilities and Exposures (CVE)
cve.org
Assigner:TPLink
Assigner Org ID:f23511db-6c3e-4e32-a477-6aa17d310630
Published At:16 Jan, 2026 | 17:24
Updated At:21 Jan, 2026 | 17:53
Rejected At:
▼CVE Numbering Authority (CNA)
Authentication Bypass in Password Recovery Feature via Local Web App on Multiple VIGI Cameras

Authentication bypass in the password recovery feature of the local web interface across multiple VIGI camera models allows an attacker on the LAN to reset the admin password without verification by manipulating client-side state. Attackers can gain full administrative access to the device, compromising configuration and network security.

Affected Products
Vendor
TP-Link Systems Inc.
Product
VIGI InSight Sx45 Series (S245/S345/S445)
Modules
  • Web app
Default Status
unaffected
Versions
Affected
  • From 0 before 3.1.0_Build_250820_Rel.57668n (custom)
Vendor
TP-Link Systems Inc.
Product
VIGI Cx45 Series (C345/C445)
Modules
  • Web app
Default Status
unaffected
Versions
Affected
  • From 0 before 3.1.0_Build_250820_Rel.57668n (custom)
Vendor
TP-Link Systems Inc.
Product
VIGI InSight Sx55 Series (S355/S455)
Modules
  • Web app
Default Status
unaffected
Versions
Affected
  • From 0 before 3.1.0_Build_250820_Rel.58873n (custom)
Vendor
TP-Link Systems Inc.
Product
VIGI Cx55 Series (C355/C455)
Modules
  • Web app
Default Status
unaffected
Versions
Affected
  • From 0 before 3.1.0_Build_250820_Rel.58873n (custom)
Vendor
TP-Link Systems Inc.
Product
VIGI InSight Sx85 Series (S285/S385)
Modules
  • Web app
Default Status
unaffected
Versions
Affected
  • From 0 before 3.0.2_Build_250630_Rel.71279n (custom)
Vendor
TP-Link Systems Inc.
Product
VIGI Cx85 Series (C385/C485)
Modules
  • Web app
Default Status
unaffected
Versions
Affected
  • From 0 before 3.0.2_Build_250630_Rel.71279n (custom)
Vendor
TP-Link Systems Inc.
Product
VIGI InSight S655I
Modules
  • Web app
Default Status
unaffected
Versions
Affected
  • From 0 before 1.1.1_Build_250625_Rel.64224n (custom)
Vendor
TP-Link Systems Inc.
Product
VIGI InSight Sx45ZI Series (S245ZI/S345ZI/S445ZI)
Modules
  • Web app
Default Status
unaffected
Versions
Affected
  • From 0 before 1.2.0_Build_250820_Rel.60930n (custom)
Vendor
TP-Link Systems Inc.
Product
VIGI InSight Sx85PI Series (S385PI/S485PI)
Modules
  • Web app
Default Status
unaffected
Versions
Affected
  • From 0 before 1.2.0_Build_250827_Rel.66817n (custom)
Vendor
TP-Link Systems Inc.
Product
VIGI C340S
Modules
  • Web app
Default Status
unaffected
Versions
Affected
  • From 0 before 3.1.0_Build_250625_Rel.65381n (custom)
Vendor
TP-Link Systems Inc.
Product
VIGI C540S / EasyCam C540S
Modules
  • Web app
Default Status
unaffected
Versions
Affected
  • From 0 before 3.1.0_Build_250625_Rel.66601n (custom)
Vendor
TP-Link Systems Inc.
Product
VIGI C540V
Modules
  • Web app
Default Status
unaffected
Versions
Affected
  • From 0 before 2.1.0_Build_250702_Rel.54300n (custom)
Vendor
TP-Link Systems Inc.
Product
VIGI C250
Modules
  • Web app
Default Status
unaffected
Versions
Affected
  • From 0 before 2.1.0_Build_250702_Rel.54301n (custom)
Vendor
TP-Link Systems Inc.
Product
VIGI Cx50 Series (C350/C450)
Modules
  • Web app
Default Status
unaffected
Versions
Affected
  • From 0 before 2.1.0_Build_250702_Rel.54294n (custom)
Vendor
TP-Link Systems Inc.
Product
VIGI Cx20I 1.0 Series (C220I 1.0/C320I 1.0/C420I 1.0)
Modules
  • Web app
Default Status
unaffected
Versions
Affected
  • From 0 before 2.1.0_Build_251014_Rel.58331n (custom)
Vendor
TP-Link Systems Inc.
Product
VIGI Cx20I 1.20 Series (C220I 1.20/C320I 1.20/C420I 1.20)
Modules
  • Web app
Default Status
unaffected
Versions
Affected
  • From 0 before 2.1.0_Build_250701_Rel.44071n (custom)
Vendor
TP-Link Systems Inc.
Product
VIGI Cx30I 1.0 Series (C230I 1.0/C330I 1.0/C430I 1.0)
Modules
  • Web app
Default Status
unaffected
Versions
Affected
  • From 0 before 2.1.0_Build_250701_Rel.45506n (custom)
Vendor
TP-Link Systems Inc.
Product
VIGI Cx30I 1.20 Series (C230I 1.20/C330I 1.20/C430I 1.20)
Modules
  • Web app
Default Status
unaffected
Versions
Affected
  • From 0 before 2.1.0_Build_250701_Rel.44555n (custom)
Vendor
TP-Link Systems Inc.
Product
VIGI Cx40I 1.0 Series (C240I 1.0/C340I 1.0/C440I 1.0)
Modules
  • Web app
Default Status
unaffected
Versions
Affected
  • From 0 before 2.1.0_Build_250701_Rel.46003n (custom)
Vendor
TP-Link Systems Inc.
Product
VIGI Cx40I 1.20 Series (C240I 1.20/C340I 1.20/C440I 1.20)
Modules
  • Web app
Default Status
unaffected
Versions
Affected
  • From 0 before 2.1.0_Build_250701_Rel.45041n (custom)
Vendor
TP-Link Systems Inc.
Product
VIGI Cx30 1.0 Series (C230 1.0/C330 1.0/C430 1.0)
Modules
  • Web app
Default Status
unaffected
Versions
Affected
  • From 0 before 2.1.0_Build_250701_Rel.46796n (custom)
Vendor
TP-Link Systems Inc.
Product
VIGI Cx30 1.20 Series (C230 1.20/C330 1.20/C430 1.20)
Modules
  • Web app
Default Status
unaffected
Versions
Affected
  • From 0 before 2.1.0_Build_250701_Rel.46796n (custom)
Vendor
TP-Link Systems Inc.
Product
VIGI C230I Mini
Modules
  • Web app
Default Status
unaffected
Versions
Affected
  • From 0 before 2.1.0_Build_250701_Rel.47570n (custom)
Vendor
TP-Link Systems Inc.
Product
VIGI C240 1.0
Modules
  • Web app
Default Status
unaffected
Versions
Affected
  • From 0 before 2.1.0_Build_250701_Rel.48425n (custom)
Vendor
TP-Link Systems Inc.
Product
VIGI C340 2.0
Modules
  • Web app
Default Status
unaffected
Versions
Affected
  • From 0 before 2.1.0_Build_250701_Rel.49304n (custom)
Vendor
TP-Link Systems Inc.
Product
VIGI C440 2.0
Modules
  • Web app
Default Status
unaffected
Versions
Affected
  • From 0 before 2.1.0_Build_250701_Rel.49778n (custom)
Vendor
TP-Link Systems Inc.
Product
VIGI C540 2.0
Modules
  • Web app
Default Status
unaffected
Versions
Affected
  • From 0 before 2.1.0_Build_250701_Rel.50397n (custom)
Vendor
TP-Link Systems Inc.
Product
VIGI C540-4G
Modules
  • Web app
Default Status
unaffected
Versions
Affected
  • From 0 before 2.2.0_Build_250826_Rel.56808n (custom)
Vendor
TP-Link Systems Inc.
Product
VIGI C340-W 2.x Series (C340-W 2.0/C340-W 2.20)
Modules
  • Web app
Default Status
unaffected
Versions
Affected
  • From 0 before 2.1.1_Build_250717_Rel.66528n (custom)
Vendor
TP-Link Systems Inc.
Product
VIGI C440-W 2.0
Modules
  • Web app
Default Status
unaffected
Versions
Affected
  • From 0 before 2.1.1_Build_250717_Rel.66632n (custom)
Vendor
TP-Link Systems Inc.
Product
VIGI C540-W 2.0
Modules
  • Web app
Default Status
unaffected
Versions
Affected
  • From 0 before 2.1.1_Build_250717_Rel.67730n (custom)
Vendor
TP-Link Systems Inc.
Product
VIGI InSight S345-4G
Modules
  • Web app
Default Status
unaffected
Versions
Affected
  • From 0 before 2.1.0_Build_250725_Rel.36867n (custom)
Vendor
TP-Link Systems Inc.
Product
VIGI InSight Sx25 Series (S225/S325/S425)
Modules
  • Web app
Default Status
unaffected
Versions
Affected
  • From 0 before 1.1.0_Build_250630_Rel.39597n (custom)
Vendor
TP-Link Systems Inc.
Product
VIGI Cx20 Series (C320/C420)
Modules
  • Web app
Default Status
unaffected
Versions
Affected
  • From 0 before 2.1.0_Build_250701_Rel.39597n (custom)
Problem Types
TypeCWE IDDescription
CWECWE-287CWE-287 Improper Authentication
Type: CWE
CWE ID: CWE-287
Description: CWE-287 Improper Authentication
Metrics
VersionBase scoreBase severityVector
4.08.7HIGH
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Version: 4.0
Base score: 8.7
Base severity: HIGH
Vector:
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Metrics Other Info
Impacts
CAPEC IDDescription
CAPEC-207CAPEC-207 Removing Important Client Functionality
CAPEC ID: CAPEC-207
Description: CAPEC-207 Removing Important Client Functionality
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://www.vigi.com/us/support/download/
patch
https://www.vigi.com/en/support/download/
patch
https://www.vigi.com/in/support/download/
patch
https://www.tp-link.com/us/support/faq/4906/
vendor-advisory
Hyperlink: https://www.vigi.com/us/support/download/
Resource:
patch
Hyperlink: https://www.vigi.com/en/support/download/
Resource:
patch
Hyperlink: https://www.vigi.com/in/support/download/
Resource:
patch
Hyperlink: https://www.tp-link.com/us/support/faq/4906/
Resource:
vendor-advisory
▼Authorized Data Publishers (ADP)
CISA ADP Vulnrichment
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
Information is not available yet
▼National Vulnerability Database (NVD)
nvd.nist.gov
Source:f23511db-6c3e-4e32-a477-6aa17d310630
Published At:16 Jan, 2026 | 18:16
Updated At:26 Jan, 2026 | 15:05

Authentication bypass in the password recovery feature of the local web interface across multiple VIGI camera models allows an attacker on the LAN to reset the admin password without verification by manipulating client-side state. Attackers can gain full administrative access to the device, compromising configuration and network security.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Secondary4.08.7HIGH
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Type: Secondary
Version: 4.0
Base score: 8.7
Base severity: HIGH
Vector:
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CPE Matches
Weaknesses
CWE IDTypeSource
CWE-287Secondaryf23511db-6c3e-4e32-a477-6aa17d310630
CWE ID: CWE-287
Type: Secondary
Source: f23511db-6c3e-4e32-a477-6aa17d310630
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
https://www.tp-link.com/us/support/faq/4906/f23511db-6c3e-4e32-a477-6aa17d310630
N/A
https://www.vigi.com/en/support/download/f23511db-6c3e-4e32-a477-6aa17d310630
N/A
https://www.vigi.com/in/support/download/f23511db-6c3e-4e32-a477-6aa17d310630
N/A
https://www.vigi.com/us/support/download/f23511db-6c3e-4e32-a477-6aa17d310630
N/A
Hyperlink: https://www.tp-link.com/us/support/faq/4906/
Source: f23511db-6c3e-4e32-a477-6aa17d310630
Resource: N/A
Hyperlink: https://www.vigi.com/en/support/download/
Source: f23511db-6c3e-4e32-a477-6aa17d310630
Resource: N/A
Hyperlink: https://www.vigi.com/in/support/download/
Source: f23511db-6c3e-4e32-a477-6aa17d310630
Resource: N/A
Hyperlink: https://www.vigi.com/us/support/download/
Source: f23511db-6c3e-4e32-a477-6aa17d310630
Resource: N/A

Change History

0
Information is not available yet

Similar CVEs

4Records found
CVE-2025-8627
Matching Score-8
Assigner-TP-Link Systems Inc.
ShareView Details
Matching Score-8
Assigner-TP-Link Systems Inc.
CVSS Score-8.7||HIGH
EPSS-0.02% / 6.12%
||
7 Day CHG~0.00%
Published-25 Aug, 2025 | 21:17
Updated-15 Sep, 2025 | 14:24
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Unauthenticated Protocol Commands on TP-Link KP303

The TP-Link KP303 Smartplug can be issued unauthenticated protocol commands that may cause unintended power-off condition and potential information leak. This issue affects TP-Link KP303 (US) Smartplug: before 1.1.0.

Action-Not Available
Vendor-TP-Link Systems Inc.TP-Link Systems Inc.
Product-kp303_firmwarekp303TP-Link KP303 (US) Smartplug
CWE ID-CWE-306
Missing Authentication for Critical Function
CVE-2025-7724
Matching Score-8
Assigner-TP-Link Systems Inc.
ShareView Details
Matching Score-8
Assigner-TP-Link Systems Inc.
CVSS Score-8.7||HIGH
EPSS-0.43% / 62.01%
||
7 Day CHG+0.01%
Published-22 Jul, 2025 | 20:43
Updated-24 Jul, 2025 | 03:55
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Unauthenticated command injection on VIGI NVR1104H-4P V1 and VIGI NVR2016H-16MP V2

An unauthenticated OS command injection vulnerability exists in VIGI NVR1104H-4P V1 and VIGI NVR2016H-16MP V2.This issue affects VIGI NVR1104H-4P V1: before 1.1.5 Build 250518; VIGI NVR2016H-16MP V2: before 1.3.1 Build 250407.

Action-Not Available
Vendor-TP-Link Systems Inc.
Product-VIGI NVR1104H-4P V1VIGI NVR2016H-16MP V2
CWE ID-CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-14300
Matching Score-8
Assigner-TP-Link Systems Inc.
ShareView Details
Matching Score-8
Assigner-TP-Link Systems Inc.
CVSS Score-8.7||HIGH
EPSS-0.10% / 26.94%
||
7 Day CHG~0.00%
Published-20 Dec, 2025 | 00:43
Updated-08 Jan, 2026 | 19:38
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Unauthenticated Access to connectAP API Endpoint on Tapo C200

The HTTPS service on Tapo C200 V3 exposes a connectAP interface without proper authentication. An unauthenticated attacker on the same local network segment can exploit this to modify the device’s Wi-Fi configuration, resulting in loss of connectivity and denial-of-service (DoS).

Action-Not Available
Vendor-TP-Link Systems Inc.TP-Link Systems Inc.
Product-tapo_c200_firmwaretapo_c200Tapo C200 V3
CWE ID-CWE-306
Missing Authentication for Critical Function
CVE-2025-14738
Matching Score-6
Assigner-TP-Link Systems Inc.
ShareView Details
Matching Score-6
Assigner-TP-Link Systems Inc.
CVSS Score-5.7||MEDIUM
EPSS-0.17% / 37.53%
||
7 Day CHG~0.00%
Published-18 Dec, 2025 | 18:01
Updated-29 Jan, 2026 | 16:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Configuration Disclosure Vulnerability in TP-Link WA850RE

Improper authentication vulnerability in TP-Link WA850RE (httpd modules) allows unauthenticated attackers to download the configuration file.This issue affects: ≤ WA850RE V2_160527, ≤ WA850RE V3_160922.

Action-Not Available
Vendor-TP-Link Systems Inc.TP-Link Systems Inc.
Product-tl-wa850retl-wa850re_firmwareWA850RE
CWE ID-CWE-287
Improper Authentication
Details not found