Vulnerability · Published Jun 2, 2026 · Assigned by TPLink

CVE-2026-1871Authenticated Stack-based Buffer Overflow in RTSP Authentication of Tapo C200

High 7.1

In plain English

A high-severity stack buffer overflow in Tapo C200 v5 from TP-Link Systems Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 23% of all known vulnerabilities).

Severity (CVSS 4.0)7.1High

Exploit odds (30 days)0.3%top 76.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

TP-Link Tapo C200 v5 contains a stack-based buffer overflow flaw in RTSP authentication handling due to improper validation of Authorization header field lengths, which can be triggered by a crafted authentication request. Successful exploitation causes the affected RTSP core service process to crash and triggers an automatic system reboot, resulting in a denial of service (DoS) condition. This prevents legitimate users from accessing the camera’s live video stream or management interface until the service restarts.

Affected products (as reported)

Vendor	Product	Versions
TP-Link Systems Inc.	Tapo C200 v5	0 – before 1.4.4 Build 260527 Rel.28339n

Weakness: CWE-121 · Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

In plain English

Official description

Affected products (as reported)

References