CVE-2026-0629Authentication Bypass in Password Recovery Feature via Local Web App on Multiple VIGI Cameras
- 8.7HighCVSS base score
- 0.42%Exploitation in 30 daysEPSS · top 63% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
Authentication bypass in the password recovery feature of the local web interface across multiple VIGI camera models allows an attacker on the LAN to reset the admin password without verification by manipulating client-side state. Attackers can gain full administrative access to the device, compromising configuration and network security.
Timeline
ID reserved
By TPLink
- 10 days later
· 10 days later
Published
- 41 days later
· 41 days later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| TPLinkCNA (assigner) | 4.0 | High8.7 | CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
| NVDNVD · Deferred | 4.0 | High8.7 | CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
- EPSS (exploitation in 30 days)
- 0.42% · top 63% of all CVEs (12 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: total
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.7.
Affected products
TP-Link Systems Inc. · VIGI InSight Sx45 Series (S245/S345/S445)
- affected < 3.1.0_Build_250820_Rel.57668n
TP-Link Systems Inc. · VIGI Cx45 Series (C345/C445)
- affected < 3.1.0_Build_250820_Rel.57668n
TP-Link Systems Inc. · VIGI InSight Sx55 Series (S355/S455)
- affected < 3.1.0_Build_250820_Rel.58873n
TP-Link Systems Inc. · VIGI Cx55 Series (C355/C455)
- affected < 3.1.0_Build_250820_Rel.58873n
TP-Link Systems Inc. · VIGI InSight Sx85 Series (S285/S385)
- affected < 3.0.2_Build_250630_Rel.71279n
TP-Link Systems Inc. · VIGI Cx85 Series (C385/C485)
- affected < 3.0.2_Build_250630_Rel.71279n
TP-Link Systems Inc. · VIGI InSight S655I
- affected < 1.1.1_Build_250625_Rel.64224n
TP-Link Systems Inc. · VIGI InSight Sx45ZI Series (S245ZI/S345ZI/S445ZI)
- affected < 1.2.0_Build_250820_Rel.60930n
TP-Link Systems Inc. · VIGI InSight Sx85PI Series (S385PI/S485PI)
- affected < 1.2.0_Build_250827_Rel.66817n
TP-Link Systems Inc. · VIGI C340S
- affected < 3.1.0_Build_250625_Rel.65381n
TP-Link Systems Inc. · VIGI C540S / EasyCam C540S
- affected < 3.1.0_Build_250625_Rel.66601n
TP-Link Systems Inc. · VIGI C540V
- affected < 2.1.0_Build_250702_Rel.54300n
TP-Link Systems Inc. · VIGI C250
- affected < 2.1.0_Build_250702_Rel.54301n
TP-Link Systems Inc. · VIGI Cx50 Series (C350/C450)
- affected < 2.1.0_Build_250702_Rel.54294n
TP-Link Systems Inc. · VIGI Cx20I 1.0 Series (C220I 1.0/C320I 1.0/C420I 1.0)
- affected < 2.1.0_Build_251014_Rel.58331n
TP-Link Systems Inc. · VIGI Cx20I 1.20 Series (C220I 1.20/C320I 1.20/C420I 1.20)
- affected < 2.1.0_Build_250701_Rel.44071n
TP-Link Systems Inc. · VIGI Cx30I 1.0 Series (C230I 1.0/C330I 1.0/C430I 1.0)
- affected < 2.1.0_Build_250701_Rel.45506n
TP-Link Systems Inc. · VIGI Cx30I 1.20 Series (C230I 1.20/C330I 1.20/C430I 1.20)
- affected < 2.1.0_Build_250701_Rel.44555n
TP-Link Systems Inc. · VIGI Cx40I 1.0 Series (C240I 1.0/C340I 1.0/C440I 1.0)
- affected < 2.1.0_Build_250701_Rel.46003n
TP-Link Systems Inc. · VIGI Cx40I 1.20 Series (C240I 1.20/C340I 1.20/C440I 1.20)
- affected < 2.1.0_Build_250701_Rel.45041n
TP-Link Systems Inc. · VIGI Cx30 1.0 Series (C230 1.0/C330 1.0/C430 1.0)
- affected < 2.1.0_Build_250701_Rel.46796n
TP-Link Systems Inc. · VIGI Cx30 1.20 Series (C230 1.20/C330 1.20/C430 1.20)
- affected < 2.1.0_Build_250701_Rel.46796n
TP-Link Systems Inc. · VIGI C230I Mini
- affected < 2.1.0_Build_250701_Rel.47570n
TP-Link Systems Inc. · VIGI C240 1.0
- affected < 2.1.0_Build_250701_Rel.48425n
TP-Link Systems Inc. · VIGI C340 2.0
- affected < 2.1.0_Build_250701_Rel.49304n
TP-Link Systems Inc. · VIGI C440 2.0
- affected < 2.1.0_Build_250701_Rel.49778n
TP-Link Systems Inc. · VIGI C540 2.0
- affected < 2.1.0_Build_250701_Rel.50397n
TP-Link Systems Inc. · VIGI C540-4G
- affected < 2.2.0_Build_250826_Rel.56808n
TP-Link Systems Inc. · VIGI C340-W 2.x Series (C340-W 2.0/C340-W 2.20)
- affected < 2.1.1_Build_250717_Rel.66528n
TP-Link Systems Inc. · VIGI C440-W 2.0
- affected < 2.1.1_Build_250717_Rel.66632n
TP-Link Systems Inc. · VIGI C540-W 2.0
- affected < 2.1.1_Build_250717_Rel.67730n
TP-Link Systems Inc. · VIGI InSight S345-4G
- affected < 2.1.0_Build_250725_Rel.36867n
TP-Link Systems Inc. · VIGI InSight Sx25 Series (S225/S325/S425)
- affected < 1.1.0_Build_250630_Rel.39597n
TP-Link Systems Inc. · VIGI Cx20 Series (C320/C420)
- affected < 2.1.0_Build_250701_Rel.39597n
References
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2026-2932 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2026-0629)Record last updated .