CVE-2026-34124
Denial of Service via Path Expansion Overflow in HTTP Service in TP-Link Tapo C520WS
- State
- Published
- Severity
- 7.1 High
- Published
- Apr 2, 2026
- Updated
- Apr 3, 2026
- Reserved
- Mar 25, 2026
Description
A denial-of-service vulnerability was identified in TP-Link Tapo C520WS v2.6 within the HTTP request path parsing logic. The implementation enforces length restrictions on the raw request path but does not account for path expansion performed during normalization. An attacker on the adjacent network may send a crafted HTTP request to cause buffer overflow and memory corruption, leading to system interruption or device reboot.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 7.1 High | CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N | TPLink |
Weaknesses
- CWE-120 Buffer Copy without Checking Size of Input
Affected Products
| Product | Versions |
|---|---|
Tapo C520WS v2.6TP-Link Systems Inc. |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.