Skip to content
OpenAdvisories

Product · TP-Link Systems

Tapo C500 v2.0

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.8
    CVE-2026-104945 Public exploit

    Authenticated ONVIF PTZ Out-of-Bounds Stack Write Denial of Service in TP-Link Tapo C500

    TP-Link Tapo C500 v2.0 contains an out-of-bounds stack write vulnerability in its ONVIF PTZ SOAP handlers. An authenticated ONVIF client can submit an excessive number of preset-related elements, causing writes beyond the bounds of fixed-size stack arrays and…

    TP-Link Systems Tapo C500 v2.0 Network devices
  • High 7.1
    CVE-2026-104944 Public exploit

    Unauthenticated TDP Function Pointer Dispatch Denial of Service in TP-Link Tapo C500

    TP-Link Tapo C500 v2.0 contains an out-of-bounds function-pointer dispatch in its TDP (TP-Link Device Protocol) daemon. A single unauthenticated UDP datagram can cause an invalid indirect call, crashing the main service and resulting in a denial-of-service co…

    TP-Link Systems Tapo C500 v2.0 Network devices