CVE-2025-55626

An Insecure Direct Object Reference (IDOR) vulnerability in Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime – firmware v3.0.0.4662_2503122283 allows unauthorized attackers to access the Admin-only settings and edit the session storage.

More information : https://relieved-knuckle-264.notion.site/Access-the-Administrator-Settings-page-with-IDOR-23c43700364280c3a8fccc2bbdcda78c?source=copy_link