CVE-2026-105810 – Authenticated Local Stack Overflow in TP-Link Tapo C320WS

​CVE ID :CVE-2026-105810

Published : Oct. 19, 2026, 6:16 p.m. | 1 hour, 3 minutes ago

Description :Tapo C320WS
V2.0 contains an authenticated stack-based buffer overflow in the local
onboarding Wi-Fi configuration path. An authenticated attacker on the
adjacent network can submit a crafted request containing an oversized encrypted
password field, overwrite stack state, and execute commands with root
privileges.

Successful
exploitation may allow an authenticated adjacent-network attacker to take
control of the affected camera, modify camera behavior, access sensitive local
configuration, and disrupt device availability.

Severity: 8.5 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more… To Read More Visit Read More