Vulnerability Description
An authenticated buffer handling flaw in TP-Link VIGI C385 V1 Web API lacking input sanitization, may allow memory corruption leading to remote code execution. Authenticated attackers may trigger buffer overflow and potentially execute arbitrary code with elevated privileges.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Tp-Link | Vigi C385 Firmware | < 3.1.1 |
| Tp-Link | Vigi C385 | 1.0 |
Related Weaknesses (CWE)
References
- https://www.tp-link.com/en/support/download/vigi-c385/v1/#FirmwareProduct
- https://www.tp-link.com/kr/support/download/vigi-c385/v1/#FirmwareProduct
- https://www.tp-link.com/us/support/faq/4931/Vendor Advisory
FAQ
What is CVE-2026-1457?
CVE-2026-1457 is a vulnerability with a CVSS score of 8.8 (HIGH). An authenticated buffer handling flaw in TP-Link VIGI C385 V1 Web API lacking input sanitization, may allow memory corruption leading to remote code execution. Authenticated attackers may trigger buff...
How severe is CVE-2026-1457?
CVE-2026-1457 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-1457?
Check the references section above for vendor advisories and patch information. Affected products include: Tp-Link Vigi C385 Firmware, Tp-Link Vigi C385.