CVE-2025-55625

An open redirect vulnerability in Reolink v4.54.0.4.20250526 allows attackers to redirect users to a malicious site via a crafted URL. NOTE: this is disputed by the Supplier because it is intentional behavior that supports redirection to Alexa URLs, which are not guaranteed to remain at the same...

CVE-2025-55621

An Insecure Direct Object Reference IDOR vulnerability in Reolink v4.54.0.4.20250526 allows unauthorized attackers to access and download other users' profile photos via a crafted URL. NOTE: this is disputed by the Supplier because it is intentional behavior; the photos are part of a social...

CVE-2025-55620

A cross-site scripting XSS vulnerability in the valuateJavascript function of Reolink v4.54.0.4.20250526 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2025-55621

The Reolink mobile application, version v4.54.0.4.20250526 , contains an Insecure Direct Object Reference (IDOR) vulnerability. This flaw allows an unauthorized attacker to access and download other users' profile photos by using a crafted URL . While the supplier disputes this as intentional beh...

CVE-2025-55623

An issue in the lock screen component of Reolink v4.54.0.4.20250526 allows attackers to bypass authentication via using an ADB Android Debug Bridge...

CVE-2025-55623

The Reolink video surveillance management mobile application, specifically version v4.54.0.4.20250526 , contains a security vulnerability in its lock screen component . This flaw allows an attacker to bypass authentication by utilizing the Android Debug Bridge (ADB) , a command-line tool used to ...

PT-2025-34455 · Reolink · Reolink

Name of the Vulnerable Software and Affected Versions: Reolink version 4.54.0.4.20250526 Description: An intent redirection issue in Reolink allows unauthorized attackers to access internal functions or non-public components. Recommendations: At the moment, there is no information about a newer...