Skip to content
Critical Authentication Bypass Vulnerability in TP-Link VIGI Cameras

Critical Authentication Bypass Vulnerability in TP-Link VIGI Cameras

First seen 21 Jan 2026, 06:39 UTC

Article Content

Browse articles
ThreatCluster AI
ThreatCluster March 12, 2026 at 13:27 UTC

TP-Link has issued a security advisory regarding a critical authentication bypass vulnerability in its VIGI camera series. This flaw, tracked as CVE-2026-0629, allows attackers on local networks to reset administrative credentials without authorization, with a CVSS v4.0 score of 8.7 indicating high severity. The vulnerability is linked to the camera's web interface password recovery function.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 183d ago How this analysis works

More articles in this cluster (4)

Following this threat?

Track TP-Link and CVE-2026-0629 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed