CVE-2026-1457 HIGH

CVE-2026-1457: Authenticated RCE Vulnerability Due to Buffer Overflow on TP-Link VIGI C385

Vendor Tp-Link Systems Inc.
Product VIGI C485 V1
Weakness CWE-121
Published January 29, 2026
Last update February 26, 2026
View on NVD All CVEs

CVSS base score

8.5/10
Attack vector Adjacent
Attack complexity Low
Privileges required High
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

An authenticated buffer handling flaw in TP-Link VIGI C385 V1 Web API lacking input sanitization, may allow memory corruption leading to remote code execution. Authenticated attackers may trigger buffer overflow and potentially execute arbitrary code with elevated privileges.

Key dates

02Disclosure timeline

January 29, 2026 CVE published
February 26, 2026 Record updated