CVE-2026-105810

Name of the Vulnerable Software and Affected Versions Tapo C320WS V2.0

Description An authenticated stack-based buffer overflow exists in the local onboarding Wi-Fi configuration path. An attacker on the adjacent network can submit a crafted request containing an oversized encrypted password field to overwrite stack state and execute commands with root privileges. This may allow the attacker to take control of the camera, modify its behavior, access sensitive local configuration, and disrupt device availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.