CVE-2026-34123

creationtimestamp| type| source ---|---|--- 2026-06-06 00:59:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnlh7apnjr27...

CVE-2026-34123 Whitelist Validation Bypass in TP-Link Tapo C520WS

On Tapo C520WS v2, restricted accounts for example, hub users are intended to execute only a limited set of low‑sensitivity operations. Due to a logic flaw in the device’s API authorization mechanism, an attacker can craft requests that leverage legitimate “method mapping” behavior to bypass...