Loading vulnerability…
Authentication bypass in TP-Link VIGI cameras password recovery (local web interface)
CVE-2026-0629 is an authentication bypass in the password recovery feature of the local web management interface of TP-Link VIGI C and VIGI InSight professional surveillance camera models (32+ models / multiple series). By manipulating client-side state in the password recovery workflow, an attacker on the local/adjacent network can reset the administrator password without verification, thereby bypassing authentication and obtaining administrative access to the device.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation allows an attacker on the LAN to reset the admin password and gain full administrative control of the affected camera. This can lead to compromise of device configuration and security settings, unauthorized access to live and recorded video, and use of the camera as a foothold for lateral movement within corporate networks; broader operational, privacy, and compliance impacts may follow from CCTV compromise.
If you can’t patch tonight, do this now.
Until patching is completed, restrict access to the cameras’ local web management interface to trusted administrative hosts only (management-plane isolation), using segmentation/VLANs, ACLs, and firewall rules; prevent untrusted LAN clients from reaching the management interface and avoid exposing the management interface to untrusted networks.
Patch, then assume compromise.
Apply TP-Link’s firmware updates that address CVE-2026-0629 for the affected VIGI camera models/series (via TP-Link/VIGI regional download centers). Devices remain vulnerable until patched. The advisory content indicates fixed versions are available for multiple series (e.g., Cx45/Cx55/Sx45/Sx55 at >= 3.1.0 Build 250820; Cx85 at >= 3.0.2 Build 250630; other listed models/series with specified fixed builds).
No public exploits tracked yet. Mallory keeps watching.
21 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.