Buffer overflow in Tp-link Systems Inc. Tapo C520ws V2

CVE-2026-6240

A stack-based buffer overflow vulnerability exists in Tapo C520WS v2 in the ONVIF DeleteUsers service, due to insufficient boundary checks when handling multiple user deletion parameters. An authenticated attacker can send a crafted malic…

Vulnerability class: Buffer Overflow

EPSS: 0.002 (7.8th percentile) — read the EPSS interpretation.