HarborGuard / CVE
Back to search
HIGHCVE-2026-0919Published Modified CNA TPLink

CVE-2026-0919: Unauthenticated Denial of Service via Oversized URL in HTTP Parser on TP-Link Tapo C210, C220 & C520WS

The HTTP parser of Tapo C210 v3, C220 v1 and C520WS v2 cameras improperly handles requests containing an excessively long URL path. An invalid‑URL error path continues into cleanup code that assumes allocated buffers exist, leading to a crash and service restart. An unauthenticated attacker can force repeated service crashes or device reboots, causing denial of service.

Metrics

CVSS v4.0
7.1
Severity
HIGH
Fixed in
1.2.3 Build 251114
Affected Products
3

Fix available

1.2.3 Build 2511141.2.6 Build 2603281.4.2 Build 251112
Patch commits
Affected packages
  • TP-Link Systems Inc. / Tapo C220 v1
    < 1.4.2 Build 251112 (from 0)
  • TP-Link Systems Inc. / Tapo C520WS v2
    < 1.2.3 Build 251114 (from 0)
  • TP Link Systems Inc. / Tapo C210 v3
    < 1.2.6 Build 260328 (from 0)
CVSS Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
References