CVE-2025-55619
Reolink v4.54.0.4.20250526 was discovered to contain a hardcoded encryption key and initialization vector. An attacker can leverage this vulnerability to decrypt access tokens a…
Published: 2025-08-22 · CVSS: 9.8 · CVSS 3.1
Reolink v4.54.0.4.20250526 was discovered to contain a hardcoded encryption key and initialization vector. An attacker can leverage this vulnerability to decrypt access tokens and web session tokens stored inside the app via reverse engineering.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7