HIGH 8.5 NVD
CVE-2026-105810
Tapo C320WS V2.0 contains an authenticated stack-based buffer overflow in the local onboarding Wi-Fi configuration path. An authenticated attacker on the adjace
Tapo C320WS
V2.0 contains an authenticated stack-based buffer overflow in the local
onboarding Wi-Fi configuration path. An authenticated attacker on the
adjacent network can submit a crafted request containing an oversized encrypted
password field, overwrite stack state, and execute commands with root
privileges.
Successful
exploitation may allow an authenticated adjacent-network attacker to take
control of the affected camera, modify camera behavior, access sensitive local
configuration, and disrupt device availability.
References
- https://www.tp-link.com/en/support/download/tapo-c320ws/v2/#Firmware-Release-Notes
- https://www.tp-link.com/us/support/download/tapo-c320ws/#Firmware-Release-Notes
- https://www.tp-link.com/us/support/faq/5351/
This high severity vulnerability with a CVSS score of 8.5 was published on 2026-10-19 via NVD.
vulnfeed aggregates 17437 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.