CVE-2026-75618
Received Received - Intake

Null Pointer Dereference in Tapo C100/C101 V5 RTSP Service

Publication date: 2026-08-19

Last updated on: 2026-08-19

Assigner: TPLink

Description
Tapo C100/C101 V5 contains a null pointer dereference vulnerability in the RTSP service. An attacker on the local network can send specially crafted requests that cause the service to dereference an invalid pointer, resulting in a service crash and device reboot. Successful exploitation can disrupt live video streaming functionality and cause a temporary denial-of-service condition.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-19
Last Modified
2026-08-19
Generated
2026-08-19
AI Q&A
2026-08-19
EPSS Evaluated
N/A
NVD
CVE-2026-75618
EUVD
EUVD-2026-62632

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
tp-link tapo_c100 *
tp-link tapo_c101 *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-476 The product dereferences a pointer that it expects to be valid but is NULL.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

Tapo C100/C101 V5 IP cameras have a null pointer dereference flaw in their RTSP service. An attacker on the same local network can exploit this by sending maliciously crafted requests that force the service to access invalid memory, causing it to crash and reboot the device. This disrupts video streaming and creates a temporary denial-of-service.

Detection Guidance

This vulnerability can be detected by monitoring for unexpected RTSP service crashes or device reboots on Tapo C100/C101 V5 devices. Check device logs for null pointer dereference errors or service termination events. Use network scanning tools like nmap to identify vulnerable devices by checking for open RTSP ports (typically 554).

Impact Analysis

If you use a Tapo C100 or C101 camera on your network, an attacker could exploit this flaw to crash your device, interrupting live video feeds. The reboot may cause brief downtime for monitoring or security systems relying on the camera.

Mitigation Strategies

Immediately update the Tapo C100/C101 V5 firmware to the latest version provided by TP-Link. If no patch is available, isolate the affected devices from the local network or disable the RTSP service if not required. Monitor device behavior closely for signs of exploitation.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-75618. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart