shinyColumn/CVE-2025-56799

shinyColumn/CVE-2025-56799

GitHubGitHub
GitHubgithub.com
Releases0
Stars1
OS Command Injection Vulnerability via Cache Clearing Scheduler in Reolink Desktop Application
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2025-56799↗
6.5 MEDIUM—

Reolink desktop application 8.18.12 contains a command injection vulnerability in its scheduled cache-clearing mechanism via a crafted folder name. NOTE: this is disputed by the Supplier because a crafted folder name would arise only if the local user were attacking himself.