CVE-2026-6240 Details

A stack-based buffer overflow vulnerability has been identified in the Tapo C520WS v2, specifically within the ONVIF DeleteUsers service. This vulnerability arises from inadequate boundary checks when processing multiple user deletion parameters. An authenticated attacker could exploit this by sending a malicious request with an excessive number of identifiers, leading to a overflow of stack memory. The successful exploitation of this vulnerability may cause a crash or deadlock of the service, creating a denial-of-service condition that disrupts device management and monitoring functions.

Users are advised to update the device to the latest firmware version. The updated firmware can be downloaded from the TP-Link website, either from the US or the international site.