What’s Vulnerable › Vulnerabilities
CVE-2026-75619: RTSP Heap Buffer Overflow Denial-of-Service Vulnerability on TP-Link Tapo C100 and C101
- Severity: medium (CVSS 5.7 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-08-19 · updated 2026-10-26
- Weakness: CWE-122
Description
Tapo C100/C101 V5 contains a heap-based buffer overflow vulnerability in the RTSP service. An authenticated attacker on the local network can send specially crafted RTSP frame data containing oversized length values, resulting in out-of-bounds heap writes. Successful exploitation can crash the RTSP service and trigger a device reboot, resulting in a temporary denial-of-service condition.
Affected products
- TP-Link Tapo C100 Firmware: before 1.5.4 — fixed in 1.5.4
- TP-Link Tapo C101 Firmware: before 1.5.4 — fixed in 1.5.4
How to fix
Upgrade to a fixed version: TP-Link Tapo C100 Firmware 1.5.4; TP-Link Tapo C101 Firmware 1.5.4. Check the vendor advisory for mitigations.
References
- https://www.tp-link.com/en/support/download/tapo-c100/#Firmware-Release-Notes
- https://www.tp-link.com/us/support/download/tapo-c100/#Firmware-Release-Notes
- https://www.tp-link.com/us/support/download/tapo-c101/#Firmware-Release-Notes
- https://www.tp-link.com/us/support/faq/5251/
Get alerted when CVE-2026-75619 or the next vulnerability affects your stack