CVE-2026-1457CWE-121

Authenticated RCE Vulnerability Due to Buffer Overflow on TP-Link VIGI C385

High · published January 29, 2026

CVSS v4.0
8.5
EPSS
8%
Percentile
94.5
In the wild
Unconfirmed
What it is

An authenticated buffer handling flaw in TP-Link VIGI C385 V1 Web API lacking input sanitization, may allow memory corruption leading to remote code execution. Authenticated attackers may trigger buffer overflow and potentially execute arbitrary code with elevated privileges.

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.07527 · 94.5th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2026-01-29T18:52Z
EPSS history
Timeline
  • 29 JAN 18:52Z
    Authenticated RCE Vulnerability Due to Buffer Overflow on TP-Link VIGI C385
    cvelistv5