CVE-2026-0629 | BDVDB-2026-310995 Detail
TP-LinkVIGI InSight Sx45 Series (S245/S345/S445)
Description#
Authentication bypass in the password recovery feature of the local web interface across multiple VIGI camera models allows an attacker on the LAN to reset the admin password without verification by manipulating client-side state. Attackers can gain full administrative access to the device, compromising configuration and network security.
Impact#
CAPEC-207 Removing Important Client Functionality
Weaknesses#
- CWE-287 Improper Authentication
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.