CVE-2026-75618

Awaiting Analysis Awaiting Analysis - Queue

Null Pointer Dereference in Tapo C100/C101 V5 RTSP Service

Publication date: 2026-08-19

Last updated on: 2026-09-04

Assigner: TPLink

Description

Tapo C100/C101 V5 contains a null pointer dereference vulnerability in the RTSP service. An attacker on the local network can send specially crafted requests that cause the service to dereference an invalid pointer, resulting in a service crash and device reboot. Successful exploitation can disrupt live video streaming functionality and cause a temporary denial-of-service condition.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-19

Last Modified

2026-09-04

Generated

2026-09-09

AI Q&A

2026-08-19

EPSS Evaluated

2026-09-07

NVD

CVE-2026-75618

EUVD

EUVD-2026-62632

Affected Vendors & Products

Vendor	Product	Version / Range
tp-link	tapo_c100_firmware	to 1.5.4 (exc)
tp-link	tapo_c101_firmware	to 1.5.4 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-476	The product dereferences a pointer that it expects to be valid but is NULL.

Attack-Flow Graph

Executive Summary

Tapo C100/C101 V5 IP cameras have a null pointer dereference flaw in their RTSP service. An attacker on the same local network can exploit this by sending maliciously crafted requests that force the service to access invalid memory, causing it to crash and reboot the device. This disrupts video streaming and creates a temporary denial-of-service.

Detection Guidance

This vulnerability can be detected by monitoring for unexpected RTSP service crashes or device reboots on Tapo C100/C101 V5 devices. Check device logs for null pointer dereference errors or service termination events. Use network scanning tools like nmap to identify vulnerable devices by checking for open RTSP ports (typically 554).

Impact Analysis

If you use a Tapo C100 or C101 camera on your network, an attacker could exploit this flaw to crash your device, interrupting live video feeds. The reboot may cause brief downtime for monitoring or security systems relying on the camera.

Compliance Impact

This vulnerability causes temporary denial-of-service by crashing the RTSP service, disrupting live video streaming. While it does not directly expose data, prolonged unavailability of surveillance systems could impact compliance with GDPR or HIPAA if the device is used in environments requiring continuous monitoring or recording.

Mitigation Strategies

Immediately update the Tapo C100/C101 V5 firmware to the latest version provided by TP-Link. If no patch is available, isolate the affected devices from the local network or disable the RTSP service if not required. Monitor device behavior closely for signs of exploitation.

Hi! I’m here to help you understand CVE-2026-75618. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70