CVE-2025-60858: Information Exposure
Source CVE Database V5
Not known to be exploited · CVSS 7.5 High.
Data as of 26 Oct 2026, 11:42 UTC
- EPSS
- 0.3% chance of exploitation in 30 days – higher than 25% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitation evidence
Disclosed: evidence found.
CVE published 28 Oct 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
AI-suggested
- Network Segmentation: Isolate Reolink Video Doorbell devices on a separate VLAN or subnet with strict firewall rules to limit exposure to untrusted networks and reduce the risk of credential interception.
- Enforce Encrypted Communication: Where possible, ensure that all device communications, including updates and configuration transfers, use encrypted channels such as TLS to prevent plaintext credential exposure.
- Monitor Network Traffic: Deploy network monitoring tools to detect unusual traffic patterns or unauthorized access attempts targeting the doorbell devices or DDNS services.
- Limit Remote Access: Disable or restrict remote access features that rely on DDNS credentials until a patch is available, or use VPNs and secure tunnels for remote connectivity.
- Device Hardening: Change default credentials, disable unnecessary services, and regularly audit device configurations to minimize attack surface.
- Vendor Coordination: Engage with Reolink for timely updates or patches addressing this vulnerability and apply them promptly once available.
- Incident Response Preparedness: Develop and test incident response plans specific to IoT device compromise scenarios to quickly contain and remediate potential breaches.
- Physical Security: Ensure physical access to the devices is controlled to prevent local extraction of credentials from configuration files.
Description
Reolink Video Doorbell Wi-Fi DB_566128M5MP_W stores and transmits DDNS credentials in plaintext within its configuration and update scripts, allowing attackers to intercept or extract sensitive information.