What is the CVSS score of CVE-2026-1457?

CVE-2026-1457 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Vigi C385 Firmware are affected by CVE-2026-1457?

TP-Link VIGI C385 V1 cameras contain a critical authentication bypass vulnerability that could allow attackers with network access to execute malicious code and compromise surveillance…

How to fix or mitigate CVE-2026-1457?

Within 24 hours: Inventory all TP-Link VIGI C385 V1 devices and restrict network access to administrative interfaces using firewall rules or air-gapping from untrusted networks. Within 7 days: Implement network segmentation to isolate camera systems on a dedicated VLAN with strict egress controls, and monitor for suspicious authentication patterns. Within 30 days: Contact TP-Link for patch availability status; if no patch emerges, develop a replacement strategy or evaluate disabling remote management capabilities until vendor remediation is available.

Vigi C385 Firmware CVE-2026-1457

HIGH

Stack-based Buffer Overflow (CWE-121)

2026-01-29 f23511db-6c3e-4e32-a477-6aa17d310630

TP-Link RCE Buffer Overflow Memory Corruption Vigi C385 Firmware

8.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:00 vuln.today

CVE Published

Jan 29, 2026 - 19:16 nvd

HIGH 8.8

DescriptionCVE.org

An authenticated buffer handling flaw in TP-Link VIGI C385 V1 Web API lacking input sanitization, may allow memory corruption leading to remote code execution. Authenticated attackers may trigger buffer overflow and potentially execute arbitrary code with elevated privileges.

AnalysisAI

Remote code execution in TP-Link VIGI C385 cameras results from improper input validation in the Web API that allows authenticated attackers to trigger buffer overflows and corrupt memory. An attacker with valid credentials can exploit this vulnerability to execute arbitrary code with elevated privileges on affected devices. No patch is currently available for this high-severity issue.

Technical ContextAI

Classified as CWE-121 (Stack-based Buffer Overflow). Affects Vigi C385 Firmware. An authenticated buffer handling flaw in TP-Link VIGI C385 V1 Web API lacking input sanitization, may allow memory corruption leading to remote code execution. Authenticated attackers may trigger buffer overflow and potentially execute arbitrary code with elevated privileges.

RemediationAI

Monitor vendor advisories for a patch. Enable ASLR, DEP/NX, and stack canaries where possible. Restrict network access to the affected service where possible.