CVE-2025-55625

6.3 mediumEPSS 0.2%

Medium (6.3) in reolink reolink. EPSS 0.2% chance of exploitation in the next 30 days.

An open redirect vulnerability in Reolink v4.54.0.4.20250526 allows attackers to redirect users to a malicious site via a crafted URL. NOTE: this is disputed by the Supplier because it is intentional behavior that supports redirection to Alexa URLs, which are not guaranteed to remain at the same domain indefinitely.

Severity

CVSS 3.1

6.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 13% of CVEs (scores of 2026-10-31)
CWE: CWE-601
Published: 2025-08-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

reolink:reolink

References

https://cwe.mitre.org/data/definitions/601.html
https://relieved-knuckle-264.notion.site/Reolink-Deeplink-Redirect-21b437003642804a865af2fb02942f66

Check your stack JSON