Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2026-105810 Details

ANALYZED

This CVE record has been analyzed and enriched by NVDAPI.com as an independent party.

Description

Tapo C320WS V2.0 contains an authenticated stack-based buffer overflow in the local onboarding Wi-Fi configuration path. An authenticated attacker on the adjacent network can submit a crafted request containing an oversized encrypted password field, overwrite stack state, and execute commands with root privileges. Successful exploitation may allow an authenticated adjacent-network attacker to take control of the affected camera, modify camera behavior, access sensitive local configuration, and disrupt device availability.

Metrics

CVSS 3.x Severity and Vector Strings:

NDDVolerionCVSS-B:7.1 HIGHVector:CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://www.tp-link.com/en/support/download/tapo-c320ws/v2/#Firmware-Release-Notes TPLinkRelease NotesVendor
https://www.tp-link.com/us/support/download/tapo-c320ws/#Firmware-Release-Notes TPLinkRelease NotesVendor
https://www.tp-link.com/us/support/faq/5351/ TPLinkAdvisoryRemedyVendor

Weakness Enumeration

CWE-IDCWE NameSource
CWE-121Stack-based Buffer OverflowTPLink

Affected Products

ProductVersions
TP-Link Tapo C320WS
V2.0

CPE

  • No CPEs found in CPE dictionary for this product.

Remediation

Change History

2 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2026-105810
NVD Published Date:
Oct 19, 2026
NVD Last Modified:
Oct 20, 2026
Source:
TPLink
CVE-2026-105810 Details - Not Deferred