Dashboard / CVE-2026-57473

CVE-2026-57473

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 57/100
Published: 2026-06-26 Modified: 2026-10-25 First seen: 2026-10-29 Status: active

Attack Surface

Adjacent Low Complexity No Auth No Interaction

CVSS Vector Breakdown

AV: Adjacent
AC: Low
PR: None
UI: None
S: X
AT: Present
VC: None
VI: None
VA: None

Description

A vulnerability exists in the netclient and factory services of Reolink Home Hub (versions prior to v3.3.0.456_26031911) due to the possibility of brute-force cracking the credentials. This issue could allow attackers on the same local network to intercept traffic between the Hub and associated cameras and compromise the credentials of connected cameras.

Weakness Classification (1)

References & Advisories (1)

Bug Bounty Relevance

57 / 100
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

5.8 / 10.0 v4.0
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.23%
Raw Score 0.002290
Percentile 13.7%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00229
2026-10-28
0.00229

Intelligence Sources

nvd ref →

External Links