Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.8

Tapo C520WS v2: Unauthenticated Denial of Service

CVE-2026-6239 · published 5 months ago
Summary

An attacker can send a specially crafted request to the Tapo C520WS v2 security camera, causing it to crash and become unavailable for configuration and management. This can happen if an attacker is already authenticated to the device. To protect the device, update to the latest firmware version.

Original advisory text
A stack‑based buffer overflow vulnerability exists in Tapo C520WS v2 in the ONVIF CreateUsers service, where the device fails to properly validate the number of XML user nodes during request proces...
A stack‑based
buffer overflow vulnerability exists in Tapo C520WS v2 in the ONVIF CreateUsers service, where
the device fails to properly validate the number of XML user nodes during
request processing. An authenticated attacker can send a specially crafted
ONVIF request containing an excessive number of user entries to trigger memory
corruption.









Successful
exploitation may cause the ONVIF management service to terminate unexpectedly,
resulting in a denial‑of‑service (DoS) condition that disrupts device
configuration and management functions.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
6.8 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-121Stack-based Buffer Overflow
Timeline
Published6 Jun 2026
Updated3 Nov 2026
First seen6 Jun 2026
Sources
CVE-2026-6239 · NVD
Track software like this
Free during beta