CVE-2026-8714: Denial-of-Service Vulnerability in RTSP Input Handling on TP-Link's Tapo C520WS

Synopsis

A denial-of-service vulnerability exists in the RTSP server component of the TP-Link Tapo C520WS v2 IP camera. An unauthenticated attacker on the same local network or adjacent segment can send a crafted, syntactically invalid RTSP request to trigger a processing error that leaves the RTSP service unresponsive. Successful exploitation disrupts the camera's video streaming capability until the service is restarted. A patched-image rebuild at firmware version 1.2.6 Build 260528 Rel.60422n is available on HarborGuard for affected environments.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityDetail

  The attacker must be on an adjacent network such as a LAN, Wi-Fi segment, or VPN; the service is not directly reachable over the open internet.

• AuthenticationNot required

  No credentials are needed; the attacker can send malformed RTSP input to the service without any prior authentication.

• Victim interactionNot required

  No user or administrator action is required to trigger the vulnerability; the attacker interacts directly with the RTSP server.

• Attack complexityDetail

  The exploit is reliable and condition-free, requiring no race conditions, specific memory layout, or other environmental dependencies.

Blast Radius

• The camera's RTSP service enters a non-responsive state, blocking all video stream consumers from receiving footage.
• Any system or integration relying on the RTSP feed (such as NVRs, monitoring dashboards, or recording software) loses access to the camera's video output.
• Confidentiality and data integrity are not affected; the impact is limited to availability of the camera's streaming service.