CVE-2026-75618

Name of the Vulnerable Software and Affected Versions Tapo C100/C101 V5

Description The RTSP service contains a null pointer dereference issue, which occurs when a program attempts to read or write to a memory address that is null, leading to a crash. An attacker on the local network can send specially crafted requests to the service, causing it to dereference an invalid pointer. This results in a service crash and device reboot, disrupting live video streaming and creating a temporary denial-of-service condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.