CVE-2026-0651

The CVE concerns TP-Link Tapo C260 v1 where an improper handling of certain GET request paths over HTTPS enables path traversal. This allows a local network attacker to probe and determine if specific files exist on the device, with no read, write, or code execution achieved. Reported CVSS 4.0 ba...