CVE-2025-55625

Published: Aug 22, 2025Modified: Jun 17, 2026

6.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Exploitability: 2.8 / Impact: 3.4

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

An open redirect vulnerability in Reolink v4.54.0.4.20250526 allows attackers to redirect users to a malicious site via a crafted URL. NOTE: this is disputed by the Supplier because it is intentional behavior that supports redirection to Alexa URLs, which are not guaranteed to remain at the same domain indefinitely.

Affected (1)

Products: Reolink: Reolink

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Reolink Reolink	Version 4.54.0.4.20250526

Related CWEs

URL Redirection to Untrusted Site ('Open Redirect')

A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks.

References (2)

https://cwe.mitre.org/data/definitions/601.html

Source: cve@mitre.org

Third Party Advisory

https://relieved-knuckle-264.notion.site/Reolink-Deeplink-Redirect-21b437003642804a865af2fb02942f66

Source: cve@mitre.org

ExploitThird Party Advisory

Timeline

No history available yet.