Reolink
Vulnerability activity for Reolink: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
CVEs on CISA's known-exploited list, newest first. "Days to KEV" counts from the CVE's publication.
- 7.2HighApr 8, 2019Reolink Multiple IP Cameras Code / command injectionCVE-2019-11001Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W IP cameras contain an authenticated OS command injection vulnerability. This vulnerability allows an authenticated admin to use the "TestEmail" functionality to inject and run OS commands as root.Added to KEV Dec 18, 2024 · 2,080 days after publicationExploited38% likelyDetection
- 9.1CriticalJan 28, 2022Reolink RLC-410W IP Camera Code / command injectionCVE-2021-40407Reolink RLC-410W IP cameras contain an authenticated OS command injection vulnerability in the device network settings functionality.Added to KEV Dec 18, 2024 · 1,054 days after publicationExploited48% likelyDetection
Recent
- 5.1MediumOct 21, 2025reolink Crypto / certificateCVE-2025-56802The Reolink desktop application uses a hard-coded and predictable AES encryption key to encrypt user configuration files allowing attackers with local access to decrypt sensitive application data stored in %APPDATA%. A different vulnerability than CVE-2025-56801. NOTE: the Supplier's position is that material is not hardcoded and is instead randomly generated on each installation of the application.
- 5.1MediumOct 21, 2025reolink Crypto / certificateCVE-2025-56801The Reolink Desktop Application 8.18.12 contains hardcoded credentials as the Initialization Vector (IV) in its AES-CFB encryption implementation allowing attackers with access to the application environment to reliably decrypt encrypted configuration data. NOTE: the Supplier's position is that material is not hardcoded and is instead randomly generated on each installation of the application.
- 5.1MediumOct 21, 2025reolink Auth bypass / access controlCVE-2025-56800Reolink desktop application 8.18.12 contains a vulnerability in its local authentication mechanism. The application implements lock screen password logic entirely on the client side using JavaScript within an Electron resource file. Because the password is stored and returned via a modifiable JavaScript property(a.settingsManager.lockScreenPassword), an attacker can patch the return value to bypass authentication. NOTE: this is disputed by the Supplier because the lock-screen bypass would only o
- 6.5MediumOct 21, 2025reolink Code / command injectionCVE-2025-56799Reolink desktop application 8.18.12 contains a command injection vulnerability in its scheduled cache-clearing mechanism via a crafted folder name. NOTE: this is disputed by the Supplier because a crafted folder name would arise only if the local user were attacking himself.1.2% likely
- 9.1CriticalJan 28, 2022Reolink RLC-410W IP Camera Code / command injectionCVE-2021-40407Reolink RLC-410W IP cameras contain an authenticated OS command injection vulnerability in the device network settings functionality.Exploited48% likelyDetection
- 7.2HighApr 8, 2019Reolink Multiple IP Cameras Code / command injectionCVE-2019-11001Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W IP cameras contain an authenticated OS command injection vulnerability. This vulnerability allows an authenticated admin to use the "TestEmail" functionality to inject and run OS commands as root.Exploited38% likelyDetection
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.