What’s Vulnerable › Vulnerabilities

CVE-2026-1457: Authenticated RCE Vulnerability Due to Buffer Overflow on TP-Link VIGI C385

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 7.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-01-29 · updated 2026-06-17
• Weakness: CWE-121

Description

An authenticated buffer handling flaw in TP-Link VIGI C385 V1 Web API lacking input sanitization, may allow memory corruption leading to remote code execution. Authenticated attackers may trigger buffer overflow and potentially execute arbitrary code with elevated privileges.

Affected products

• TP-Link Systems Inc. VIGI C485 V1: before 3.1.1 — fixed in 3.1.1

How to fix

Upgrade to a fixed version: TP-Link Systems Inc. VIGI C485 V1 3.1.1. Check the vendor advisory for mitigations.

References

• https://www.tp-link.com/en/support/download/vigi-c385/v1/#Firmware
• https://www.tp-link.com/kr/support/download/vigi-c385/v1/#Firmware
• https://www.tp-link.com/us/support/faq/4931/

Get alerted when CVE-2026-1457 or the next vulnerability affects your stack