CVE-2026-6240

CVE-2026-6240

A stack-based buffer overflow vulnerability exists in Tapo C520WS v2 in the ONVIF DeleteUsers service, due to insufficient boundary checks when handling multiple user deletion parameters. An authenticated attacker can send a crafted malic…

Vulnerability class: Buffer Overflow

Weakness classification (CWE)

References