Security Advisory

CVE-2025-55621

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-08-22 00:00:00

Last updated 2025-09-04 14:37:30

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An Insecure Direct Object Reference (IDOR) vulnerability in Reolink v4.54.0.4.20250526 allows unauthorized attackers to access and download other users' profile photos via a crafted URL. NOTE: this is disputed by the Supplier because it is intentional behavior; the photos are part of a social platform on which users expect to find one another.

← Browse all CVEs View on cve.org ↗