Medium severity · published Jun 24, 2026
CVE-2026-12760
Denial-of-Service Vulnerability via Malformed IPv4 Fragmentation Handling in TP-Link Tapo C200
6.5
CVSS
0.4%
EPSS
No
On KEV
Description
A denial-of-service (DoS) vulnerability has been identified in Tapo C200 v3 in the network packet handling logic due to improper handling of IPv4 fragmented packets. An unauthenticated adjacent attacker can send crafted packets to cause excessive resource consumption, leading to instability of the device.Successful exploitation can remotely trigger a temporary denial-of-service condition, causing the camera to become unresponsive and resulting in intermittent loss of video monitoring and recording.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 30% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TC
Tapo C200 v3 · TP-Link Systems Inc.
before 1.4.4 Build 250922 · source: vendor
TC
Tapo C200 Firmware · Tp-link
1.3.3; 1.3.4; 1.3.5; 1.3.7; 1.3.9; 1.3.11; +5 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-12760
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-12760
Release Notes
https://www.tp-link.com/en/support/download/tapo-c200/v3/#Firmware-Release-Notes
Release Notes
https://www.tp-link.com/us/support/download/tapo-c200/v3/#Firmware-Release-Notes
Vendor Advisory
https://www.tp-link.com/us/support/faq/5143/
