Skip to content
OpenAdvisories
High · 7.1 CVE-2026-8714 EUVD-2026-34855GHSA-78fp-rfh4-99fh

Denial-of-Service Vulnerability in RTSP Input Handling on TP-Link's Tapo C520WS

Published Jun 5, 2026 · Updated Jun 5, 2026 · Assigned by TPLink

Description

A denial-of-service
vulnerability exists in the RTSP server component of TP-Link Tapo C520WS v2 due to improper handling of
syntactically invalid input.  Crafted inputs
can trigger a processing error, causing the RTSP service to enter non-responsive
state.

Successful
exploitation may cause the RTSP in a denial-of-service condition.

Affected products

VendorProductAffectedFixed
TP-Link Systems Tapo C520WS v2 < 1.2.6 Build 260528 Rel.60422n 1.2.6 Build 260528 Rel.60422n

References