PT-2026-4988 · Tapo · Tapo C520Ws+1

Giuseppe Signorelli · Published 2026-01-27 · Updated 2026-03-12 · CVE-2026-0919

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Tapo C220 version 1 Tapo C520WS version 2

Description The HTTP parser in the cameras does not correctly process requests with very long URL paths. This leads to a crash and service restart due to improper handling of allocated buffers in cleanup code. An attacker who does not need to be authenticated can repeatedly crash the service or reboot the device, resulting in a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2026-0919

Affected Products

Tapo C220

Tapo C520Ws

References · 13

• https://tp-link.com/en/support/download/tapo-c220/v1 · Patch
• https://osv.dev/vulnerability/CVE-2026-0919 · Vendor Advisory
• https://tp-link.com/us/support/faq/4923 · Vendor Advisory
• https://tp-link.com/en/support/download/tapo-c210/v3 · Patch
• https://tp-link.com/us/support/download/tapo-c520ws/v2 · Patch
• https://tp-link.com/us/support/download/tapo-c220/v1.60 · Patch
• https://tp-link.com/en/support/download/tapo-c520ws/v2 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-0919 · Security Note
• https://tp-link.com/us/support/download/tapo-c210/v3 · Patch
• https://twitter.com/dailycve/status/2031944932923973993 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2016279296147341726 · Twitter Post
• https://t.me/cveNotify/155187 · Telegram Post
• https://twitter.com/CVEnew/status/2016217613945491575 · Twitter Post