CVE-2025-55625: Reolink

Medium severity, CVSS 6.3. EPSS: 0.2% chance of exploitation in the next 30 days.

An open redirect vulnerability in Reolink v4.54.0.4.20250526 allows attackers to redirect users to a malicious site via a crafted URL. NOTE: this is disputed by the Supplier because it is intentional behavior that supports redirection to Alexa URLs, which are not guaranteed to remain at the same domain indefinitely.

Affected products

• Reolink Reolink: version 4.54.0.4.20250526 only

Published 2025-08-22. Last modified 2026-06-17.