Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An authenticated buffer handling flaw in TP-Link VIGI C385 V1 Web API lacking input sanitization, may allow memory corruption leading to remote code execution. Authenticated attackers may trigger buffer overflow and potentially execute arbitrary code with elevated privileges.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
CVE-2026-1457 TP-Link VIGI C385 V1 Web API Remote Code Execution via Buffer Overflow https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-1457
Post summary
The text announces a new buffer‑overflow RCE vulnerability (CVE‑2026‑1457) in TP‑Link VIGI C385 V1, providing only basic technical detail and no PoC or exploitation evidence.
CVE-2026-1457 An authenticated buffer handling flaw in TP-Link VIGI C385 V1 Web API lacking input sanitization, may allow memory corruption leading to remote code execution. Authenti… https://www.cve.org/CVERecord?id=CVE-2026-1457
Post summary
The post announces an authentication‑based buffer handling flaw in the TP‑Link VIGI C385 V1 Web API that could lead to remote code execution, but it provides no exploit, patch, or evidence of active use.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | tp-link | vigi_c385 | 1.0 | - | - |
| OS | tp-link | vigi_c385_firmware | - | - | - |