PT-2026-29847 · Tp Link Systems+1 · Tapo C520Ws V2.6+1

Published 2026-04-02 · Updated 2026-04-29 · CVE-2026-34119

Positive Technologies (AI Summary)

CVSS v4.0

7.1

High

Base vector

AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions TP-Link Tapo C520WS version 2.6

Description A heap-based buffer overflow exists in the HTTP parsing loop when appending segmented request bodies. This occurs due to insufficient boundary validation when handling externally supplied HTTP input, specifically within the HTTP POST body parsing mechanism. An attacker on the same network segment can trigger heap memory corruption by sending crafted payloads that cause write operations beyond allocated buffer boundaries, resulting in a Denial-of-Service (DoS) condition where the device process crashes or becomes unresponsive.

Recommendations Update TP-Link Tapo C520WS version 2.6 to the latest firmware version provided by the vendor.

Fix

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

CVE-2026-34119

Affected Products

Tapo C520Ws V2.6

Tapo C520Ws Firmware

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2026-34119 · Security Note
• https://tp-link.com/us/support/download/tapo-c520ws/#Firmware-Release-Notes · Patch
• https://tp-link.com/en/support/download/tapo-c520ws/#Firmware-Release-Notes · Patch
• https://tp-link.com/us/support/faq/5047 · Vendor Advisory
• https://twitter.com/syedaquib77/status/2040008191413485803 · Twitter Post
• https://twitter.com/syedaquib77/status/2040038290472989143 · Twitter Post
• https://reddit.com/r/SecOpsDaily/comments/1sz6tbb/secopsdaily_20260429_roundup · Reddit Post
• https://twitter.com/syedaquib77/status/2040015449086136453 · Twitter Post
• https://reddit.com/r/SecOpsDaily/comments/1sz6sfu/cve202634119_tplink_http_post_body_heap_buffer · Reddit Post