Vulnerability Details CVE-2026-8714
A denial-of-service
vulnerability exists in the RTSP server component of TP-Link Tapo C520WS v2 due to improper handling of
syntactically invalid input. Crafted inputs
can trigger a processing error, causing the RTSP service to enter non-responsive
state.
Successful
exploitation may cause the RTSP in a denial-of-service condition.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 10.6%
CVSS Severity
CVSS v3 Score 6.5
References
Products affected by CVE-2026-8714
-
cpe:2.3:h:tp-link:tapo_c520ws:2.0
-
cpe:2.3:o:tp-link:tapo_c520ws_firmware:1.2.3
-
cpe:2.3:o:tp-link:tapo_c520ws_firmware:1.2.4