Medium severity · published Apr 2, 2026
CVE-2026-34122
Stack-based Buffer Overflow Leading to Denial of Service in TP-Link Tapo C520WS
6.5
CVSS
0.3%
EPSS
No
On KEV
Description
A stack-based buffer overflow vulnerability was identified in TP-Link Tapo C520WS v2.6 within a configuration handling component due to insufficient input validation. An attacker can exploit this vulnerability by supplying an excessively long value for a vulnerable configuration parameter, resulting in a stack overflow. Successful exploitation results in Denial-of-Service (DoS) condition, leading to a service crash or device reboot, impacting availability.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 17% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TC
Tapo C520WS v2.6 · TP-Link Systems Inc.
before 1.2.4 Build 260326 Rel.24666n · source: vendor
TC
Tapo C520ws Firmware · Tp-link
before 1.2.4 · source: NVD
Affected product
TC
Tapo C520WS v2.6
TP-Link Systems Inc.
More from Tapo C520WS v2.6
8.8
CVE-2026-34121
Authentication Bypass in DS Configuration Service via HTTP Request Parsing Differential of TP-Link Tapo C520WS
7.8
CVE-2026-0651
Path Traversal on TP-Link Tapo D235, C211, C520WS and C260 via Local https
6.5
CVE-2026-34124
Denial of Service via Path Expansion Overflow in HTTP Service in TP-Link Tapo C520WS
6.5
CVE-2026-34120
Heap-based Buffer Overflow Vulnerability Leading to Denial-of-Service in TP-Link Tapo C520WS
6.5
CVE-2026-34119
Heap-based Buffer Overflow Vulnerability Leading to Denial-of-Service in TP-Link Tapo C520WS