Live › vulnerability › CVE-2026-105810
Go to dashboardThe Tapo C320WS V2.0 camera has a stack-based buffer overflow in its local onboarding Wi-Fi configuration path. An attacker with credentials on the adjacent network can send an oversized encrypted password field and run commands as root on the camera.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Owners of the Tapo C320WS V2.0 camera on a local network where an untrusted party could reach the device. The sources describe exposure through the local onboarding Wi-Fi configuration path, so the risk is local-network, not internet-facing. Teams with other Tapo models or no Tapo cameras can skip it.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Tapo C320WS V2.0 contains an authenticated stack-based buffer overflow in the local onboarding Wi-Fi configuration path. An authenticated attacker on the adjacent network can submit a crafted request containing an oversized encrypted password field, overwrite stack state, and execute commands with root privileges.
Successful exploitation may allow an authenticated adjacent-network attacker to take control of the affected camera, modify camera behavior, access sensitive local configuration, and disrupt device availability.
This page as .md · .json · in your agent: get_signal("CVE-2026-105810")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.