CVE-2026-6240
Medium
Description
A stack-based buffer overflow vulnerability exists in Tapo C520WS v2 in the ONVIF DeleteUsers service, due to insufficient boundary checks when handling multiple user deletion parameters. An authenticated attacker can send a crafted malicious request containing an excessive number of identifiers to overflow stack memory. Successful exploitation may result in a service crash or deadlock, leading to DoS affecting device management and monitoring functionality.
SeverityMedium
CVSS6.8
Exploit probability—
ProductTapo C520WS v2
PublishedJun 6, 2026
First seenJun 6, 2026
Weakness typeCWE-121CWE-121
How to fix
Update
- TP-Link Systems Inc. Tapo C520WS v21.2.6 Build 260528 or later
Patches
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| TP-Link Systems Inc. Tapo C520WS v2 | v < 1.2.6 Build 260528 | 1.2.6 Build 260528 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.