Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2025-56799

EPSS 2.51% · P86
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2025-56799

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Reolink desktop application 8.18.12 contains a command injection vulnerability in its scheduled cache-clearing mechanism via a crafted folder name. NOTE: this is disputed by the Supplier because a crafted folder name would arise only if the local user were attacking himself.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Reolink desktop application 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Reolink desktop application是美国Reolink公司的一个安全摄像头监控软件。 Reolink desktop application 8.18.12版本存在安全漏洞,该漏洞源于计划缓存清理机制对特制文件夹名处理不当,可能导致命令注入攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2025-56799

#POC DescriptionSource LinkShenlong Link
1OS Command Injection Vulnerability via Cache Clearing Scheduler in Reolink Desktop Applicationhttps://github.com/shinyColumn/CVE-2025-56799POC Details
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-56799

登录查看更多情报信息。

Same Patch Batch · n/a · 2025-10-21 · 27 CVEs total

CVE-2025-605078.9 HIGHMoodle GeniAI plugin 安全漏洞
CVE-2020-368555.3 MEDIUMDCMTK dcmqrscp parseQuota stack-based overflow
CVE-2022-49813.3 LOWDCMTK dcmqrscp dcmqrcnf.cc readPeerList null pointer dereference
CVE-2025-52079D-Link DIR-820L 安全漏洞
CVE-2025-61457sharp 安全漏洞
CVE-2025-56802Reolink desktop application 安全漏洞
CVE-2025-56801Reolink desktop application 安全漏洞
CVE-2025-56800Reolink desktop application 安全漏洞
CVE-2025-61255PHPGurukul Bank Locker Management System 安全漏洞
CVE-2025-60427Libretime 安全漏洞
CVE-2025-60790ProcessWire 安全漏洞
CVE-2025-60772NETLINK HG322G 安全漏洞
CVE-2025-60506Moodle PDF Annotator plugin 安全漏洞
CVE-2025-60511Moodle OpenAI Chat Block plugin 安全漏洞
CVE-2025-60500QDocs Smart School Management System 安全漏洞
CVE-2025-60280Bang Resto 安全漏洞
CVE-2025-61220MySecondLine 安全漏洞
CVE-2025-61181DaiCuo CMS 安全漏洞
CVE-2025-61194DaiCuo CMS 安全漏洞
CVE-2025-56450Spacecom Log2Space Subscriber Management Software 安全漏洞

Showing top 20 of 27 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2025-56799

No comments yet


Leave a comment