CVE-2026-75619
Medium
Description
Tapo C100/C101 V5 contains a heap-based buffer overflow vulnerability in the RTSP service. An authenticated attacker on the local network can send specially crafted RTSP frame data containing oversized length values, resulting in out-of-bounds heap writes. Successful exploitation can crash the RTSP service and trigger a device reboot, resulting in a temporary denial-of-service condition.
SeverityMedium
CVSS5.7
Exploit probability—
Product
Tp-link Tapo C100 Firmware
PublishedAug 19, 2026
First seenAug 19, 2026
Weakness typeCWE-122CWE-122
How to fix
Update
- tp-link tapo_c100_firmware1.5.4 or later
- tp-link tapo_c101_firmware1.5.4 or later
Patches
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tp-link tapo_c100_firmware | v < 1.5.4 | 1.5.4 |
| tp-link tapo_c101_firmware | v < 1.5.4 | 1.5.4 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.