Exploit for Path Traversal in Tp-Link Tapo_C260_Firmware

🗓️ 06 Mar 2026 16:26:00Reported by l0lsecType

PoC for Tapo C260 enabling unauthenticated-to-root remote code execution via three vulnerabilities.

Reporter	Title	Published	Views	Family All 31
GithubExploit	Exploit for Path Traversal in Tp-Link Tapo_C260_Firmware	25 Jun 202620:32	–	githubexploit
ATTACKERKB	CVE-2026-0651	10 Feb 202617:27	–	attackerkb
ATTACKERKB	CVE-2026-0653	10 Feb 202617:27	–	attackerkb
BDU FSTEC	The vulnerability of TP-Link Tapo C260 IP camera’s microprogramming software lies in the incorrect limitation of the path name to the directory. This allows a intruder to gain unauthorized access to the protected information.	17 Feb 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of TP-Link Tapo C260’s microprogrammed software lies in the lack of measures to neutralize specific elements, allowing intruders to execute arbitrary codes.	17 Feb 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of TP-Link Tapo C260 IP camera’s microprogramming software, related to insufficient access control, allows a intruder to bypass existing security restrictions.	17 Feb 202600:00	–	bdu_fstec
Circl	CVE-2026-0651	12 Feb 202607:16	–	circl
Circl	CVE-2026-0652	12 Feb 202607:16	–	circl
Circl	CVE-2026-0653	6 Mar 202611:43	–	circl
CNNVD	TP-Link Tapo C260 安全漏洞	10 Feb 202600:00	–	cnnvd