What is CVE-2026-12760?

CVE-2026-12760 is a medium-severity vulnerability in Tp-link Tapo_c200, classified under Allocation of Resources Without Limits or Throttling. CVSS score: 6.5/10. Published 2026-06-24.

How severe is CVE-2026-12760?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Resource exhaustion in Tp-link Tapo_c200

CVE-2026-12760

A denial-of-service (DoS) vulnerability has been identified in Tapo C200 v3 in the network packet handling logic due to improper handling of IPv4 fragmented packets. An unauthenticated adjacent attacker can send crafted packets to cause e…

EPSS: 0.002 (13.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Tp-link Tapo_c200 — versions 3
Tp-link Tapo_c200_firmware — versions 1.3.3, 1.3.4, 1.3.5
Tp-link Systems Inc. Tapo C200 V3 — versions 0

Weakness classification (CWE)

CWE-770 — Allocation of Resources Without Limits or Throttling

References

f23511db-6c3e-4e32-a477-6aa17d310630 (Release Notes, patch)
f23511db-6c3e-4e32-a477-6aa17d310630 (Release Notes, patch)
f23511db-6c3e-4e32-a477-6aa17d310630 (vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2026-12760?: CVE-2026-12760 is a medium-severity vulnerability in Tp-link Tapo_c200, classified under Allocation of Resources Without Limits or Throttling. CVSS score: 6.5/10. Published 2026-06-24.
How severe is CVE-2026-12760?: Medium severity. CVSS v3 base score is 6.5 out of 10.