Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

CVE-2026-57473

Quick assessment

Affected
Reolink Home Hub
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Reolink Home Hub是美国Reolink公司的一款视频监控中枢设备。 Reolink Home Hub 3.3.0.456_26031911之前版本存在信任管理问题漏洞,该漏洞源于netclient和factory服务有可能被暴力破解凭据,可能导致同一局域网内的攻击者拦截集线器与关联摄像头之间的流量并破解已连接摄像头的凭据。

AI Predicted 5.9 Difficulty: Moderate EPSS 0.23% · P13

Affected Version Matrix 1

VendorProduct Version RangeStatus
Reolink Home Hub < 3.3.0.456_26031911 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-57473

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability exists in the netclient and factory services of Reolink Home Hub (versions prior to v3.3.0.456_26031911) due to the possibility of brute-force cracking the credentials. This issue could allow attackers on the same local network to intercept traffic between the Hub and associated cameras and compromise the credentials of connected cameras.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H
Source: CVE Program / CVE List V5
Vulnerability Type
CWE-1391
Source: CVE Program / CVE List V5
Vulnerability Title
Reolink Home Hub 信任管理问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Reolink Home Hub是美国Reolink公司的一款视频监控中枢设备。 Reolink Home Hub 3.3.0.456_26031911之前版本存在信任管理问题漏洞,该漏洞源于netclient和factory服务有可能被暴力破解凭据,可能导致同一局域网内的攻击者拦截集线器与关联摄像头之间的流量并破解已连接摄像头的凭据。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Reolink Home Hub 0 ~ 3.3.0.456_26031911 -

II. Public POCs for CVE-2026-57473

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-57473

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-57473 (1)

IV. Related Vulnerabilities

V. Comments for CVE-2026-57473

No comments yet


Leave a comment