CVE-2026-6240: TP-Link Systems Inc Tapo c520ws v2

Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days.

A stack-based buffer overflow vulnerability exists in Tapo C520WS v2 in the ONVIF DeleteUsers service, due to insufficient boundary checks when handling multiple user deletion parameters. An authenticated attacker can send a crafted malicious request containing an excessive number of identifiers to overflow stack memory. Successful exploitation may result in a service crash or deadlock, leading to DoS affecting device management and monitoring functionality.

Affected products

• TP-Link Systems Inc Tapo c520ws v2: before 1.2.6 Build 260528 (fixed in 1.2.6 Build 260528)

Published 2026-06-06. Last modified 2026-07-23.