CVE-2026-6239

CVE-2026-6239

A stack‑based buffer overflow vulnerability exists in Tapo C520WS v2 in the ONVIF CreateUsers service, where the device fails to properly validate the number of XML user nodes during request processing. An authenticated attacker can send a…

Vulnerability class: Buffer Overflow

Weakness classification (CWE)

References