TP

Cybersecuritynews •Abinaya • January 20, 2026

A critical authentication vulnerability affecting TP-Link’s VIGI surveillance camera lineup has been disclosed, enabling attackers on local networks to reset administrative credentials without authorization. Tracked as CVE-2026-0629, the flaw resides in the camera’s web interface password recovery function and carries a CVSS v4.0 score of 8.7, indicating high severity. The authentication bypass flaw stems from […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Authentication Bypass Vulnerability in TP-Link VIGI Cameras TP-Link has issued a security advisory regarding a critical authentication bypass vulnerability in its VIGI camera series. This flaw, tracked as CVE-2026-0629, allows attackers on local networks to reset administrative credentials without authorization, with a CVSS v4.0 score of 8.7 indicating high severity. The vulnerability is linked to the camera's web interface password recovery function. 4 sources 56

Extracted Entities

TP

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (1)

Platforms (1)