CVE-2026-6239

Name of the Vulnerable Software and Affected Versions Tapo C520WS v2

Description A stack-based buffer overflow occurs in the ONVIF CreateUsers service due to improper validation of the number of XML user nodes during request processing. An authenticated attacker can send a specially crafted ONVIF request with an excessive number of user entries to trigger memory corruption. This can lead to the unexpected termination of the ONVIF management service, resulting in a denial-of-service (DoS) condition that disrupts device configuration and management functions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.