Buffer overflow in Tp-link Systems Inc. Tapo C520ws V2.6

CVE-2026-34124

A denial-of-service vulnerability was identified in TP-Link Tapo C520WS v2.6 within the HTTP request path parsing logic. The implementation enforces length restrictions on the raw request path but does not account for path expansion perfor…

Vulnerability class: Buffer Overflow

EPSS: 0.000 (9.3th percentile) — read the EPSS interpretation.