CVE-2026-6239

creationtimestamp| type| source ---|---|--- 2026-06-06 00:52:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnlgskpkir2q...

CVE-2026-6239 Authenticated Stack-based Buffer Overflow in ONVIF CreateUsers Service in TP-Link Tao C520WS

A stack‑based buffer overflow vulnerability exists in Tapo C520WS v2 in the ONVIF CreateUsers service, where the device fails to properly validate the number of XML user nodes during request processing. An authenticated attacker can send a specially crafted ONVIF request containing an excessive...