Vulnerability · Published Jan 29, 2026 · Assigned by TPLink

CVE-2026-1457Authenticated RCE Vulnerability Due to Buffer Overflow on TP-Link VIGI C385

High 8.5

In plain English

A high-severity stack buffer overflow in VIGI C485 V1 from TP-Link Systems Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 7.5% (higher than 95% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.

Severity (CVSS 4.0)8.5High

Exploit odds (30 days)7.5%top 5.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack tooling1Public PoC

Official description

An authenticated buffer handling flaw in TP-Link VIGI C385 V1 Web API lacking input sanitization, may allow memory corruption leading to remote code execution. Authenticated attackers may trigger buffer overflow and potentially execute arbitrary code with elevated privileges.

Affected products (as reported)

Vendor	Product	Versions
TP-Link Systems Inc.	VIGI C485 V1	0 – before 3.1.1 Build 251124 Rel.50371n

Weakness: CWE-121 · Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

In plain English

Official description

Affected products (as reported)

References