Medium severity5.3NVD Advisory· Published Aug 22, 2025· Updated Jun 17, 2026

CVE-2025-55626

Description

An Insecure Direct Object Reference (IDOR) vulnerability in Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.4662_2503122283 allows unauthorized attackers to access the Admin-only settings and edit the session storage.

Affected products

Reolink/Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chimellm-fuzzy
Range: 3.0.0.4662_2503122283

Patches

Vulnerability mechanics

References

relieved-knuckle-264.notion.site/Access-the-Administrator-Settings-page-with-IDOR-23c43700364280c3a8fccc2bbdcda78cnvd

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000