Vulnerability in Tp-link Systems Inc. Tapo C520ws V2

CVE-2026-6241

An authenticated format string vulnerability is present in the ONVIF AddScopes in Tapo C520WS v2, where user-controlled input is improperly passed to formatting functions without adequate sanitization. An attacker can inject format specifi…

EPSS: 0.002 (5.9th percentile) — read the EPSS interpretation.