CVE-2026-105810
Received Received - Intake

Authenticated Stack-Based Buffer Overflow in Tapo C320WS Camera

Publication date: 2026-10-19

Last updated on: 2026-10-19

Assigner: TPLink

Description
Tapo C320WS V2.0 contains an authenticated stack-based buffer overflow in the local onboarding Wi-Fi configuration path. An authenticated attacker on the adjacent network can submit a crafted request containing an oversized encrypted password field, overwrite stack state, and execute commands with root privileges. Successful exploitation may allow an authenticated adjacent-network attacker to take control of the affected camera, modify camera behavior, access sensitive local configuration, and disrupt device availability.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-19
Last Modified
2026-10-19
Generated
2026-10-19
AI Q&A
2026-10-19
EPSS Evaluated
N/A
NVD
CVE-2026-105810
EUVD
EUVD-2026-104523

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
TP-Link Systems Inc. Tapo C320WS v2 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-121 A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an authenticated stack-based buffer overflow in the Tapo C320WS V2.0 camera's local onboarding Wi-Fi configuration. An attacker on the same network can send a crafted request with an oversized encrypted password field, which overwrites stack memory and allows execution of arbitrary commands with root privileges.

Detection Guidance

Detecting this vulnerability requires checking the firmware version of the Tapo C320WS camera. If the firmware version is V2.0 or earlier, the device is vulnerable. Use the camera's web interface or mobile app to verify the firmware version. Alternatively, scan the network for the device and check its firmware details.

Impact Analysis

Exploitation may allow an attacker to take full control of the camera, modify its behavior, access sensitive local configurations, or disrupt device availability. This could lead to unauthorized surveillance, data theft, or denial of service.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data stored on or transmitted by the Tapo C320WS camera, potentially violating GDPR and HIPAA requirements for data protection and confidentiality. Unauthorized command execution may also disrupt device availability, impacting service continuity obligations under these regulations.

Mitigation Strategies

Update the Tapo C320WS V2 firmware to the latest version immediately to patch the stack-based buffer overflow vulnerability. Ensure the device is running firmware version 1.6.6 Build 260917 Rel.81089n or later as recommended by TP-Link.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-105810. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart