PT-2026-4989 · Tapo · Tapo C220+1

Published 2026-01-27 · Updated 2026-03-12 · CVE-2026-1315

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Tapo C220 version 1 Tapo C520WS version 2

Description Sending specially crafted files to the firmware update endpoint can cause the device to terminate core system services before authentication or firmware integrity is verified. This allows an unauthenticated attacker to trigger a persistent denial of service, requiring a manual reboot or application-initiated restart to restore normal device operation. The affected API endpoint is the firmware update endpoint.

Recommendations For Tapo C220 version 1, avoid using the firmware update endpoint. For Tapo C520WS version 2, avoid using the firmware update endpoint.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2026-1315

Affected Products

Tapo C220

Tapo C520Ws

References · 11

• https://tp-link.com/en/support/download/tapo-c520ws/v2 · Patch
• https://tp-link.com/us/support/faq/4923 · Vendor Advisory
• https://tp-link.com/us/support/download/tapo-c220/v1.60 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-1315 · Security Note
• https://tp-link.com/en/support/download/tapo-c220/v1 · Patch
• https://osv.dev/vulnerability/CVE-2026-1315 · Vendor Advisory
• https://tp-link.com/us/support/download/tapo-c520ws/v2 · Patch
• https://twitter.com/VulmonFeeds/status/2016276736258805879 · Twitter Post
• https://twitter.com/CVEnew/status/2016217613022724174 · Twitter Post
• https://t.me/cveNotify/155188 · Telegram Post
• https://twitter.com/dailycve/status/2031947439817503159 · Twitter Post