CVE-2026-57473 | Nozomi Networks Labs

Summary

A CWE-1391: Use of weak credentials exists in netclient and factory services of Reolink Home Hub (versions prior to v3.3.0.456_26031911) due to the possibility of brute-force cracking of the credentials.

Impact

An adjacent attacker may intercept traffic and compromise credentials of associated cameras

Issue Date

June 26, 2026

Affects

This issue affects Reolink Reolink Home Hub versions prior to v3.3.0.456_26031911

CVE Name

CVE-2026-57473

CVSS Details

CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H

CVSS Score

5.8

Solution

Update to at least version v3.3.0.456_26031911 which addresses the issue

Mitigations

Acknowledgements

Raffaele Bova at Nozomi Networks

Nozomi Threat Intelligence

Nozomi Networks Labs curates threat and vulnerability insights that are continuously fed into the Nozomi Networks platform to ensure our sensors can detect existing and emerging threats and vulnerabilities that threaten customers environments.

Learn more