CVE-2026-34121 Details
Description
An authentication bypass vulnerability within the HTTP handling of the DS configuration service in TP-Link Tapo C520WS v2.6 was identified, due to inconsistent parsing and authorization logic in JSON requests during authentication check. An unauthenticated attacker can append an authentication-exempt action to a request containing privileged DS do actions, bypassing authorization checks. Successful exploitation allows unauthenticated execution of restricted configuration actions, which may result in unauthorized modification of device state.
An authentication bypass vulnerability has been identified in the TP-Link Tapo C520WS camera, specifically in version 2.6. This vulnerability arises from inconsistent parsing and authorization logic in JSON requests during the authentication process. An unauthenticated attacker can exploit this by appending an authentication-exempt action to a request that includes privileged actions, thereby bypassing authorization checks. Successful exploitation allows unauthorized execution of restricted configuration actions, potentially leading to unauthorized changes in the device's state.
Users are advised to update to the latest firmware version. The updated firmware can be downloaded from the TP-Link website, either from the US or the international support page.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Apr 2, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.tp-link.com/en/support/download/tapo-c520ws/#Firmware-Release-Notes | TPLink | Release Notes |
| https://www.tp-link.com/us/support/download/tapo-c520ws/#Firmware-Release-Notes | TPLink | Release Notes |
| https://www.tp-link.com/us/support/faq/5047/ | TPLink | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-287 | Improper Authentication | TPLink |
Affected Products
| Product | Versions |
|---|---|
| tp-link tapo c520ws firmware | < 1.2.4 |
CPE
Remediation
| |
| tp-link tapo c520ws | 2.6 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 24, 2026 | CVE Translated | [email protected] |
| Jun 17, 2026 | CVE Modified | TPLink |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Apr 6, 2026 | Initial Analysis | [email protected] |
| Apr 2, 2026 | New CVE Received | TPLink |