Riskcovery

CVE-2026-0629

Authentication Bypass in Password Recovery Feature via Local Web App on Multiple VIGI Cameras

State
Published
Severity
8.7 High
Published
Jan 16, 2026
Updated
Feb 26, 2026
Reserved
Jan 6, 2026

Read the record on cve.org

Description

Authentication bypass in the password recovery feature of the local web interface across multiple VIGI camera models allows an attacker on the LAN to reset the admin password without verification by manipulating client-side state. Attackers can gain full administrative access to the device, compromising configuration and network security.

Scores

CVSSScoreVectorSource
4.08.7 HighCVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:NTPLink

Weaknesses

Affected Products

ProductVersions
VIGI InSight Sx45 Series (S245/S345/S445)TP-Link Systems Inc.
  • before 3.1.0_Build_250820_Rel.57668nAffected
VIGI Cx45 Series (C345/C445)TP-Link Systems Inc.
  • before 3.1.0_Build_250820_Rel.57668nAffected
VIGI InSight Sx55 Series (S355/S455)TP-Link Systems Inc.
  • before 3.1.0_Build_250820_Rel.58873nAffected
VIGI Cx55 Series (C355/C455)TP-Link Systems Inc.
  • before 3.1.0_Build_250820_Rel.58873nAffected
VIGI InSight Sx85 Series (S285/S385)TP-Link Systems Inc.
  • before 3.0.2_Build_250630_Rel.71279nAffected
VIGI Cx85 Series (C385/C485)TP-Link Systems Inc.
  • before 3.0.2_Build_250630_Rel.71279nAffected
VIGI InSight S655ITP-Link Systems Inc.
  • before 1.1.1_Build_250625_Rel.64224nAffected
VIGI InSight Sx45ZI Series (S245ZI/S345ZI/S445ZI)TP-Link Systems Inc.
  • before 1.2.0_Build_250820_Rel.60930nAffected
VIGI InSight Sx85PI Series (S385PI/S485PI)TP-Link Systems Inc.
  • before 1.2.0_Build_250827_Rel.66817nAffected
VIGI C340STP-Link Systems Inc.
  • before 3.1.0_Build_250625_Rel.65381nAffected
VIGI C540S / EasyCam C540STP-Link Systems Inc.
  • before 3.1.0_Build_250625_Rel.66601nAffected
VIGI C540VTP-Link Systems Inc.
  • before 2.1.0_Build_250702_Rel.54300nAffected
VIGI C250TP-Link Systems Inc.
  • before 2.1.0_Build_250702_Rel.54301nAffected
VIGI Cx50 Series (C350/C450)TP-Link Systems Inc.
  • before 2.1.0_Build_250702_Rel.54294nAffected
VIGI Cx20I 1.0 Series (C220I 1.0/C320I 1.0/C420I 1.0)TP-Link Systems Inc.
  • before 2.1.0_Build_251014_Rel.58331nAffected
VIGI Cx20I 1.20 Series (C220I 1.20/C320I 1.20/C420I 1.20)TP-Link Systems Inc.
  • before 2.1.0_Build_250701_Rel.44071nAffected
VIGI Cx30I 1.0 Series (C230I 1.0/C330I 1.0/C430I 1.0)TP-Link Systems Inc.
  • before 2.1.0_Build_250701_Rel.45506nAffected
VIGI Cx30I 1.20 Series (C230I 1.20/C330I 1.20/C430I 1.20)TP-Link Systems Inc.
  • before 2.1.0_Build_250701_Rel.44555nAffected
VIGI Cx40I 1.0 Series (C240I 1.0/C340I 1.0/C440I 1.0)TP-Link Systems Inc.
  • before 2.1.0_Build_250701_Rel.46003nAffected
VIGI Cx40I 1.20 Series (C240I 1.20/C340I 1.20/C440I 1.20)TP-Link Systems Inc.
  • before 2.1.0_Build_250701_Rel.45041nAffected
VIGI Cx30 1.0 Series (C230 1.0/C330 1.0/C430 1.0)TP-Link Systems Inc.
  • before 2.1.0_Build_250701_Rel.46796nAffected
VIGI Cx30 1.20 Series (C230 1.20/C330 1.20/C430 1.20)TP-Link Systems Inc.
  • before 2.1.0_Build_250701_Rel.46796nAffected
VIGI C230I MiniTP-Link Systems Inc.
  • before 2.1.0_Build_250701_Rel.47570nAffected
VIGI C240 1.0TP-Link Systems Inc.
  • before 2.1.0_Build_250701_Rel.48425nAffected
VIGI C340 2.0TP-Link Systems Inc.
  • before 2.1.0_Build_250701_Rel.49304nAffected
VIGI C440 2.0TP-Link Systems Inc.
  • before 2.1.0_Build_250701_Rel.49778nAffected
VIGI C540 2.0TP-Link Systems Inc.
  • before 2.1.0_Build_250701_Rel.50397nAffected
VIGI C540-4GTP-Link Systems Inc.
  • before 2.2.0_Build_250826_Rel.56808nAffected
VIGI C340-W 2.x Series (C340-W 2.0/C340-W 2.20)TP-Link Systems Inc.
  • before 2.1.1_Build_250717_Rel.66528nAffected
VIGI C440-W 2.0TP-Link Systems Inc.
  • before 2.1.1_Build_250717_Rel.66632nAffected
VIGI C540-W 2.0TP-Link Systems Inc.
  • before 2.1.1_Build_250717_Rel.67730nAffected
VIGI InSight S345-4GTP-Link Systems Inc.
  • before 2.1.0_Build_250725_Rel.36867nAffected
VIGI InSight Sx25 Series (S225/S325/S425)TP-Link Systems Inc.
  • before 1.1.0_Build_250630_Rel.39597nAffected
VIGI Cx20 Series (C320/C420)TP-Link Systems Inc.
  • before 2.1.0_Build_250701_Rel.39597nAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.