High 8.7Published Jan 16, 2026

CVE-2026-0629Authentication Bypass in Password Recovery Feature via Local Web App on Multiple VIGI Cameras

Updated under an hour ago (Oct 26, 2026, 6:10 AM ET)

Does this affect you?

It affects TP-Link Systems Inc. VIGI InSight Sx45 Series (S245/S345/S445) and 33 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for TP-Link Systems Inc. VIGI InSight Sx45 Series (S245/S345/S445)

Exploited in the last 30 days

Authentication bypass in the password recovery feature of the local web interface across multiple VIGI camera models allows an attacker on the LAN to reset the admin password without verification by manipulating client-side state. Attackers can gain full administrative access to the device, compromising configuration and network security.

CVSS: 8.7 HIGH (v4.0, CNA)CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Weakness (CWE): CWE-287
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: TPLink
NVD analysis: Deferred
Record last updated: Feb 26, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

TP-Link Systems Inc. VIGI InSight Sx45 Series (S245/S345/S445) tp_link_systems:vigi_insight_sx45_series_s245_s345_s445 (from the name)	before 3.1.0_Build_250820_Rel.57668n	CNA record
TP-Link Systems Inc. VIGI Cx45 Series (C345/C445) tp_link_systems:vigi_cx45_series_c345_c445 (from the name)	before 3.1.0_Build_250820_Rel.57668n	CNA record
TP-Link Systems Inc. VIGI InSight Sx55 Series (S355/S455) tp_link_systems:vigi_insight_sx55_series_s355_s455 (from the name)	before 3.1.0_Build_250820_Rel.58873n	CNA record
TP-Link Systems Inc. VIGI Cx55 Series (C355/C455) tp_link_systems:vigi_cx55_series_c355_c455 (from the name)	before 3.1.0_Build_250820_Rel.58873n	CNA record
TP-Link Systems Inc. VIGI InSight Sx85 Series (S285/S385) tp_link_systems:vigi_insight_sx85_series_s285_s385 (from the name)	before 3.0.2_Build_250630_Rel.71279n	CNA record
TP-Link Systems Inc. VIGI Cx85 Series (C385/C485) tp_link_systems:vigi_cx85_series_c385_c485 (from the name)	before 3.0.2_Build_250630_Rel.71279n	CNA record
TP-Link Systems Inc. VIGI InSight S655I tp_link_systems:vigi_insight_s655i (from the name)	before 1.1.1_Build_250625_Rel.64224n	CNA record
TP-Link Systems Inc. VIGI InSight Sx45ZI Series (S245ZI/S345ZI/S445ZI) tp_link_systems:vigi_insight_sx45zi_series_s245zi_s345zi_s445zi (from the name)	before 1.2.0_Build_250820_Rel.60930n	CNA record
TP-Link Systems Inc. VIGI InSight Sx85PI Series (S385PI/S485PI) tp_link_systems:vigi_insight_sx85pi_series_s385pi_s485pi (from the name)	before 1.2.0_Build_250827_Rel.66817n	CNA record
TP-Link Systems Inc. VIGI C340S tp_link_systems:vigi_c340s (from the name)	before 3.1.0_Build_250625_Rel.65381n	CNA record
TP-Link Systems Inc. VIGI C540S / EasyCam C540S tp_link_systems:vigi_c540s_easycam_c540s (from the name)	before 3.1.0_Build_250625_Rel.66601n	CNA record
TP-Link Systems Inc. VIGI C540V tp_link_systems:vigi_c540v (from the name)	before 2.1.0_Build_250702_Rel.54300n	CNA record
TP-Link Systems Inc. VIGI C250 tp_link_systems:vigi_c250 (from the name)	before 2.1.0_Build_250702_Rel.54301n	CNA record
TP-Link Systems Inc. VIGI Cx50 Series (C350/C450) tp_link_systems:vigi_cx50_series_c350_c450 (from the name)	before 2.1.0_Build_250702_Rel.54294n	CNA record
TP-Link Systems Inc. VIGI Cx20I 1.0 Series (C220I 1.0/C320I 1.0/C420I 1.0) tp_link_systems:vigi_cx20i_1.0_series_c220i_1.0_c320i_1.0_c420i_1.0 (from the name)	before 2.1.0_Build_251014_Rel.58331n	CNA record
TP-Link Systems Inc. VIGI Cx20I 1.20 Series (C220I 1.20/C320I 1.20/C420I 1.20) tp_link_systems:vigi_cx20i_1.20_series_c220i_1.20_c320i_1.20_c420i_1.20 (from the name)	before 2.1.0_Build_250701_Rel.44071n	CNA record
TP-Link Systems Inc. VIGI Cx30I 1.0 Series (C230I 1.0/C330I 1.0/C430I 1.0) tp_link_systems:vigi_cx30i_1.0_series_c230i_1.0_c330i_1.0_c430i_1.0 (from the name)	before 2.1.0_Build_250701_Rel.45506n	CNA record
TP-Link Systems Inc. VIGI Cx30I 1.20 Series (C230I 1.20/C330I 1.20/C430I 1.20) tp_link_systems:vigi_cx30i_1.20_series_c230i_1.20_c330i_1.20_c430i_1.20 (from the name)	before 2.1.0_Build_250701_Rel.44555n	CNA record
TP-Link Systems Inc. VIGI Cx40I 1.0 Series (C240I 1.0/C340I 1.0/C440I 1.0) tp_link_systems:vigi_cx40i_1.0_series_c240i_1.0_c340i_1.0_c440i_1.0 (from the name)	before 2.1.0_Build_250701_Rel.46003n	CNA record
TP-Link Systems Inc. VIGI Cx40I 1.20 Series (C240I 1.20/C340I 1.20/C440I 1.20) tp_link_systems:vigi_cx40i_1.20_series_c240i_1.20_c340i_1.20_c440i_1.20 (from the name)	before 2.1.0_Build_250701_Rel.45041n	CNA record
TP-Link Systems Inc. VIGI Cx30 1.0 Series (C230 1.0/C330 1.0/C430 1.0) tp_link_systems:vigi_cx30_1.0_series_c230_1.0_c330_1.0_c430_1.0 (from the name)	before 2.1.0_Build_250701_Rel.46796n	CNA record
TP-Link Systems Inc. VIGI Cx30 1.20 Series (C230 1.20/C330 1.20/C430 1.20) tp_link_systems:vigi_cx30_1.20_series_c230_1.20_c330_1.20_c430_1.20 (from the name)	before 2.1.0_Build_250701_Rel.46796n	CNA record
TP-Link Systems Inc. VIGI C230I Mini tp_link_systems:vigi_c230i_mini (from the name)	before 2.1.0_Build_250701_Rel.47570n	CNA record
TP-Link Systems Inc. VIGI C240 1.0 tp_link_systems:vigi_c240_1.0 (from the name)	before 2.1.0_Build_250701_Rel.48425n	CNA record
TP-Link Systems Inc. VIGI C340 2.0 tp_link_systems:vigi_c340_2.0 (from the name)	before 2.1.0_Build_250701_Rel.49304n	CNA record
TP-Link Systems Inc. VIGI C440 2.0 tp_link_systems:vigi_c440_2.0 (from the name)	before 2.1.0_Build_250701_Rel.49778n	CNA record
TP-Link Systems Inc. VIGI C540 2.0 tp_link_systems:vigi_c540_2.0 (from the name)	before 2.1.0_Build_250701_Rel.50397n	CNA record
TP-Link Systems Inc. VIGI C540-4G tp_link_systems:vigi_c540_4g (from the name)	before 2.2.0_Build_250826_Rel.56808n	CNA record
TP-Link Systems Inc. VIGI C340-W 2.x Series (C340-W 2.0/C340-W 2.20) tp_link_systems:vigi_c340_w_2.x_series_c340_w_2.0_c340_w_2.20 (from the name)	before 2.1.1_Build_250717_Rel.66528n	CNA record
TP-Link Systems Inc. VIGI C440-W 2.0 tp_link_systems:vigi_c440_w_2.0 (from the name)	before 2.1.1_Build_250717_Rel.66632n	CNA record
TP-Link Systems Inc. VIGI C540-W 2.0 tp_link_systems:vigi_c540_w_2.0 (from the name)	before 2.1.1_Build_250717_Rel.67730n	CNA record
TP-Link Systems Inc. VIGI InSight S345-4G tp_link_systems:vigi_insight_s345_4g (from the name)	before 2.1.0_Build_250725_Rel.36867n	CNA record
TP-Link Systems Inc. VIGI InSight Sx25 Series (S225/S325/S425) tp_link_systems:vigi_insight_sx25_series_s225_s325_s425 (from the name)	before 1.1.0_Build_250630_Rel.39597n	CNA record
TP-Link Systems Inc. VIGI Cx20 Series (C320/C420) tp_link_systems:vigi_cx20_series_c320_c420 (from the name)	before 2.1.0_Build_250701_Rel.39597n	CNA record

References

https://www.vigi.com/us/support/download/patch
https://www.vigi.com/en/support/download/patch
https://www.vigi.com/in/support/download/patch
https://www.tp-link.com/us/support/faq/4906/vendor-advisory

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.