Recommended action window: Monitor and triage in normal cycle
NVD description
Tapo C320WS V2.0 contains an authenticated stack-based buffer overflow in the local onboarding Wi-Fi configuration path. An authenticated attacker on the adjacent network can submit a crafted request containing an oversized encrypted password field, overwrite stack state, and execute commands with root privileges. Successful exploitation may allow an authenticated adjacent-network attacker to take control of the affected camera, modify camera behavior, access sensitive local configuration, and disrupt device availability.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
Just got my first CVE ! CVE-2026-105810 : Authenticated RCE in the TP-Link Tapo C320WS camera (HW V2.0). PoC: https://github.com/M0ud4/CVE-2026-105810/tree/main CVE: https://www.cve.org/CVERecord?id=CVE-2026-105810