CVE-2025-56799: Reolink

Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days.

Reolink desktop application 8.18.12 contains a command injection vulnerability in its scheduled cache-clearing mechanism via a crafted folder name. NOTE: this is disputed by the Supplier because a crafted folder name would arise only if the local user were attacking himself.

Affected products

• Reolink Reolink: version 8.18.12 only

Published 2025-10-21. Last modified 2026-06-17.