What is CVE-2026-1457?

CVE-2026-1457 is a high-severity vulnerability in Tp-Link Vigi C385, classified under Stack-based Buffer Overflow. CVSS score: 8.8/10. Published 2026-01-29.

How severe is CVE-2026-1457?

High severity. CVSS v3 base score is 8.8 out of 10.

Buffer overflow in Tp-Link Vigi C385

CVE-2026-1457

An authenticated buffer handling flaw in TP-Link VIGI C385 V1 Web API lacking input sanitization, may allow memory corruption leading to remote code execution. Authenticated attackers may trigger buffer overflow and potentially execute arbitrary code with elevated privileges.

Vulnerability class: Buffer Overflow

EPSS: 0.066 (93.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Tp-link Vigi_c385 — versions 1.0
Tp-link Vigi_c385_firmware
Tp-link Systems Inc. Vigi C485 V1 — versions 0

Weakness classification (CWE)

CWE-121 — Stack-based Buffer Overflow

References

f23511db-6c3e-4e32-a477-6aa17d310630 (Product, patch)
f23511db-6c3e-4e32-a477-6aa17d310630 (Product, patch)
f23511db-6c3e-4e32-a477-6aa17d310630 (vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2026-1457?: CVE-2026-1457 is a high-severity vulnerability in Tp-Link Vigi C385, classified under Stack-based Buffer Overflow. CVSS score: 8.8/10. Published 2026-01-29.
How severe is CVE-2026-1457?: High severity. CVSS v3 base score is 8.8 out of 10.