Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
A path traversal vulnerability was identified TP-Link Tapo C260 v1, D235 v1, C211 v2 and C520WS v2.6 within the HTTP server’s handling of GET requests. The server performs path normalization before fully decoding URL encoded input and falls back to using the raw path when normalization fails. An attacker can exploit this logic flaw by supplying crafted, URL encoded traversal sequences that bypass directory restrictions and allow access to files outside the intended web root. Successful exploitation may allow authenticated attackers to get disclosure of sensitive system files and credentials, while unauthenticated attackers may gain access to non-sensitive static assets.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
| Date | Total | Labels |
|---|
| 2026-02-12 | 1 | Disclosure1 |
| 2026-03-06 | 1 | PoC1 |
| 2026-03-10 | 1 | Exploit1 |
| 2026-04-30 | 1 | PoC1 |
Getting a Shell on the Tapo C260 Webcam (CVE-2026-0651, CVE-2026-0652, CVE-2026-0653) https://spaceraccoon.dev/getting-shell-tapo-c260-webcam/
Post summary
The post refers to a proof‑of‑concept that demonstrates shell access on the Tapo C260 webcam via CVE‑2026‑0651, ‑0652, and ‑0653, but it does not include exploit code, patch information, or evidence of active exploitation.
#exploit #reversing 1⃣ Getting a Shell on the Tapo C260 Camera (CVE-2026-0651, CVE-2026-0652, CVE-2026-0653) https://spaceraccoon.dev/getting-shell-tapo-c260-webcam // Reverse-engineered Tapo C260 firmware reveals vulnerabilities enabling local file disclosure and full RCE through path traversal and configuration manipulation 2⃣ nginx UI Vulnerability https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-g9w5-qffc-6762 // CVE-2026-27944 (9.8/10) 3⃣ Patch diff to SYSTEM https://www.elastic.co/security-labs/patch-diff-to-system // Researchers utilized LLMs and patch diffing to develop a reliable privilege escalation exploit for Windows DWM via a UAF, demonstrating AI's growing role in vulnerability discovery and exploitation 4⃣ Reverse engineering Claude's CVE-2026-2796 exploit https://red.anthropic.com/2026/exploit ]-> Claude Code skill to support Android app's reverse engineering https://github.com/SimoneAvogadro/android-reverse-engineering-skill
Post summary
The post highlights the availability of actionable exploitation code for several CVEs, including PoC links and detailed attack methods, but does not report real‑world attacks or vendor patches.
CVE-2026-0651: TP-Link HTTP GET path traversal https://labs.taszk.io/blog/post/123_tp_path_traversal/
Post summary
The text announces CVE-2026-0651, a TP‑Link HTTP GET path traversal flaw, and provides a link that likely contains a PoC, with no evidence of active exploitation or patch information.
🚨 TP-Link Tapo #CVE-2026-0651 & #CVE-2026-0652: Unauthenticated RCE and File Disclosure in Millions of Smart Cameras — Full Technical Breakdown + Video https://undercodetesting.com/tp-link-tapo-cve-2026-0651-cve-2026-0652-unauthenticated-rce-and-file-disclosure-in-millions-of-smart-cameras-full-technical-breakdown-video/ Educational Purposes!
Post summary
The post announces TP‑Link Tapo CVE‑2026‑0651 and CVE‑2026‑0652, detailing unauthenticated remote code execution and file disclosure in millions of smart cameras, and provides a full technical breakdown and educational video.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | tp-link | tapo_c260 | 1 | - | - |
| OS | tp-link | tapo_c260_firmware | - | - | - |