Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Tapo C100 v5, C220 v1 and C520WS v2 cameras’ HTTP service does not safely handle POST requests containing an excessively large Content-Length header. The resulting failed memory allocation triggers a NULL pointer dereference, causing the main service process to crash. An unauthenticated attacker can repeatedly crash the service, causing temporary denial of service. The device restarts automatically, and repeated requests can keep it unavailable.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 4 products
| Date | Total | Labels |
|---|
| 2026-01-27 | 2 | Disclosure1General1 |
| 2026-03-12 | 1 | Disclosure1 |
🔴 Tapo C220 & C520WS, Denial of Service, #CVE-2026-0918 (High) https://dailycve.com/tapo-c220-c520ws-denial-of-service-cve-2026-0918-high/
Post summary
A headline reports a high‑severity denial‑of‑service vulnerability, CVE-2026-0918, affecting Tapo C220 and C520WS devices.
CVE-2026-0918 Denial of Service in TP-Link Tapo C220 and C520WS Cameras via HTTP Header Overflow https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-0918
Post summary
The post announces a Denial of Service vulnerability (CVE-2026-0918) in TP‑Link Tapo cameras caused by an HTTP header overflow, with no evidence of exploitation or patches available.
CVE-2026-0918 The Tapo C220 v1 and C520WS v2 cameras’ HTTP service does not safely handle POST requests containing an excessively large Content-Length header. The resulting failed me… https://www.cve.org/CVERecord?id=CVE-2026-0918
Post summary
CVE-2026-0918 details how Tapo C220 and C520WS cameras' HTTP service fails when receiving a POST request with an overly large Content-Length header.
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | tp-link | tapo_c220 | 1 | - | - |
| OS | tp-link | tapo_c220_firmware | - | - | - |
| HW | tp-link | tapo_c520ws | 2 | - | - |
| OS | tp-link | tapo_c520ws_firmware | - | - | - |