CVE-2026-1457

Authenticated RCE Vulnerability Due to Buffer Overflow on TP-Link VIGI C385

An authenticated buffer handling flaw in TP-Link VIGI C385 V1 Web API lacking input sanitization, may allow memory corruption leading to remote code execution. Authenticated attackers may trigger buffer overflow and potentially execute arbitrary code with elevated privileges.

Affected

TP-Link Systems Inc. · VIGI C485 V1

CVSS v4.0 CNA

8.5 HIGHCVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS v3.1 NVD

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

7.53% chance of exploitation in the next 30 days, 94th percentile

Published

2026-01-29

Updated

2026-02-26

Proof-of-concept exploits (1)

• ii4gsp/CVE-2026-14570★ · 2026-01-31

Security advisories

• https://www.tp-link.com/us/support/faq/4931
• https://www.tp-link.com/en/support/download/vigi-c385/v1/#Firmware
• https://www.tp-link.com/kr/support/download/vigi-c385/v1/#Firmware

References

• CVE Record
• NVD entry

Related

• CVE-2020-27786
• CVE-2026-49413