CVE-2026-104945

TP-Link Tapo C500 v2.0 contains an out-of-bounds stack write vulnerability in its ONVIF PTZ SOAP handlers. An authenticated ONVIF client can submit an excessive number of preset-related elements, causing writes beyond the bounds of fixed-size stack arrays and resulting in a crash of the affected...

CVE-2026-104945

The TP-Link Tapo C500 v2.0 is vulnerable to an out-of-bounds stack write within its ONVIF PTZ SOAP handlers . An authenticated ONVIF client can trigger this by submitting an excessive number of preset-related elements, causing writes beyond the boundaries of fixed-size stack arrays. This flaw lea...

EUVD-2026-93839

TP-Link Tapo C500 v2.0 contains an out-of-bounds stack write vulnerability in its ONVIF PTZ SOAP handlers. An authenticated ONVIF client can submit an excessive number of preset-related elements, causing writes beyond the bounds of fixed-size stack arrays and resulting in a crash of the affected...