CVE-2025-55621

An Insecure Direct Object Reference IDOR vulnerability in Reolink v4.54.0.4.20250526 allows unauthorized attackers to access and download other users' profile photos via a crafted URL. NOTE: this is disputed by the Supplier because it is intentional behavior; the photos are part of a social...

Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime 安全漏洞

Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime is a smart wired WiFi video doorbell from Reolink USA. A security vulnerability exists in Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime version 3.0.0.46622503122283, which originates from a command injection in the...

CVE-2025-55620

CVE-2025-55620 describes an XSS in the Reolink mobile app/Web UI via the valuateJavascript() function in Reolink v4.54.0.4.20250526. The root cause is improper handling/sanitization of crafted payloads, allowing attackers to execute arbitrary web scripts or HTML when a user views or interacts wit...