TP Link Systems Inc. Tapo C520WS v2

• CVE-2026-6242 Medium 6.8 Authenticated Format String Vulnerability in ONVIF Subscribe Service on TP-Link Tapo C520WS 0.2%
• CVE-2026-6241 Medium 6.8 Authenticated Format String Vulnerability in ONVIF AddScopes Method on TP-Link Tapo C520WS 0.2%
• CVE-2026-6240 Medium 6.8 Authenticated Stack-based Buffer Overflow in ONVIF DeleteUsers Service on TP-Link Tapo C520WS 0.2%
• CVE-2026-6239 Medium 6.8 Authenticated Stack-based Buffer Overflow in ONVIF CreateUsers Service in TP-Link Tao C520WS 0.2%
• CVE-2026-34123 High 7.0 Whitelist Validation Bypass in TP-Link Tapo C520WS 0.2%
• CVE-2026-8714 High 7.1 Denial-of-Service Vulnerability in RTSP Input Handling on TP-Link's Tapo C520WS 0.2%
• CVE-2026-1315 High 7.1 Unauthenticated Denial of Service via Firmware Update Endpoint on TP-Link Tapo C220 & C520WS 0.6%
• CVE-2026-0919 High 7.1 Unauthenticated Denial of Service via Oversized URL in HTTP Parser on TP-Link Tapo C210, C220 & C520WS 0.6%
• CVE-2026-0918 High 7.1 Null Pointer Dereference in Tapo SmartCam HTTP Service on TP-Link Tapo C220 & C520WS 0.7%