BaselineWatch
Desk

CVE-2026-8714

7.1 high SSVC exploitation: none Analyzed

A denial-of-service vulnerability exists in the RTSP server component of TP-Link Tapo C520WS v2 due to improper handling of syntactically invalid input. Crafted inputs can trigger a processing error, causing the RTSP service to enter non-responsive state. Successful exploitation may cause the RTSP in a denial-of-service condition.

Fix

Patch, vendor advisory and mitigation references on NVD 1

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 1

  1. First seenCVSS 7.1 · tp-linkNVD modified 2026-10-26 11:10

Affected (CPE criteria) 1

  • cpe:2.3:o:tp-link:tapo_c520ws_firmware:*:*:*:*:*:*:*:*

References 3