SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityAnalyzed

CVE-2026-1457

An authenticated buffer handling flaw in TP-Link VIGI C385 V1 Web API lacking input sanitization, may allow memory corruption leading to remote code execution.

HIGH 8.5EPSS 6.92%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (6.92%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

An authenticated buffer handling flaw in TP-Link VIGI C385 V1 Web API lacking input sanitization, may allow memory corruption leading to remote code execution. Authenticated attackers may trigger buffer overflow and potentially execute arbitrary code with elevated privileges.

CVSS 4.0
8.5 HIGHCVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
EPSS
6.92% probability · 94th percentile
CISA KEV
Not listed
Weakness
CWE-121
Affected
tp-link/vigi c385 firmware
Source
f23511db-6c3e-4e32-a477-6aa17d310630

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.