Lucene search
+L

7 matches found

NVD
NVD
•added 2026/10/06 7:17 p.m.•25 views

CVE-2026-104945

TP-Link Tapo C500 v2.0 contains an out-of-bounds stack write vulnerability in its ONVIF PTZ SOAP handlers. An authenticated ONVIF client can submit an excessive number of preset-related elements, causing writes beyond the bounds of fixed-size stack arrays and resulting in a crash of the affected...

6.8CVSS0.00223EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2026/10/06 6:41 p.m.•45 views

CVE-2026-104945 Authenticated ONVIF PTZ Out-of-Bounds Stack Write Denial of Service in TP-Link Tapo C500

TP-Link Tapo C500 v2.0 contains an out-of-bounds stack write vulnerability in its ONVIF PTZ SOAP handlers. An authenticated ONVIF client can submit an excessive number of preset-related elements, causing writes beyond the bounds of fixed-size stack arrays and resulting in a crash of the affected...

6.8CVSS0.00223EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2026/10/06 6:41 p.m.•12 views

CVE-2026-104945 Authenticated ONVIF PTZ Out-of-Bounds Stack Write Denial of Service in TP-Link Tapo C500

TP-Link Tapo C500 v2.0 contains an out-of-bounds stack write vulnerability in its ONVIF PTZ SOAP handlers. An authenticated ONVIF client can submit an excessive number of preset-related elements, causing writes beyond the bounds of fixed-size stack arrays and resulting in a crash of the affected...

6.8CVSS5.9AI score0.00223EPSS
SaveExploits1References3
CVE
CVE
•added 2026/10/06 6:41 p.m.•23 views

CVE-2026-104945

The TP-Link Tapo C500 v2.0 is vulnerable to an out-of-bounds stack write within its ONVIF PTZ SOAP handlers . An authenticated ONVIF client can trigger this by submitting an excessive number of preset-related elements, causing writes beyond the boundaries of fixed-size stack arrays. This flaw lea...

6.8CVSS5.9AI score0.00223EPSS
SaveExploits1References3
EUVD
EUVD
•added 2026/10/06 6:41 p.m.•24 views

EUVD-2026-93839

TP-Link Tapo C500 v2.0 contains an out-of-bounds stack write vulnerability in its ONVIF PTZ SOAP handlers. An authenticated ONVIF client can submit an excessive number of preset-related elements, causing writes beyond the bounds of fixed-size stack arrays and resulting in a crash of the affected...

6.8CVSS5.9AI score0.00223EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•15 views

PT-2026-106850

TP-Link Tapo C500 v2.0 contains an out-of-bounds stack write vulnerability in its ONVIF PTZ SOAP handlers. An authenticated ONVIF client can submit an excessive number of preset-related elements, causing writes beyond the bounds of fixed-size stack arrays and resulting in a crash of the affected...

6.8CVSS5.9AI score0.00223EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•21 views

CVE-2026-104945: Stack-based Buffer Overflow

TP-Link Tapo C500 v2.0 contains an out-of-bounds stack write vulnerability in its ONVIF PTZ SOAP handlers. An authenticated ONVIF client can submit an excessive number of preset-related elements, causing writes beyond the bounds of fixed-size stack arrays and resulting in a crash of the affected...

6.8CVSS5.9AI score0.00223EPSS
SaveExploits1References2
Rows per page
Query Builder