Format String Vulnerability in Tapo C520WS by TP-Link
CVE-2026-6242

6.8MEDIUM

Key Information:

Vendor

Tp-link Systems Inc.

Status
Tapo C520ws V2
Vendor
CVE Published:
5 June 2026

What is CVE-2026-6242?

An authenticated format string vulnerability in the Tapo C520WS v2's ONVIF Subscribe service arises from inadequate management of externally supplied parameters in formatting functions. Attackers can exploit this weakness by crafting format strings in event subscription requests, potentially leading to unexpected termination of the event notification service. This disruption can result in significant issues such as loss of real-time alarm functionalities and interruptions in event notifications.

Affected Version(s)

Tapo C520WS v2 0 < 1.2.6 Build 260528

References

https://www.tp-link.com/us/support/download/tapo-c520ws/#...
patch
https://www.tp-link.com/en/support/download/tapo-c520ws/#...
patch
https://www.tp-link.com/us/support/faq/5120/
vendor-advisory

CVSS V4

Score:
6.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.