CVE-2026-8714CWE-20

Denial-of-Service Vulnerability in RTSP Input Handling on TP-Link's Tapo C520WS

High · published June 5, 2026

CVSS v4.0
7.1
EPSS
0%
Percentile
25.5
In the wild
Unconfirmed
What it is

A denial-of-service

vulnerability exists in the RTSP server component of TP-Link Tapo C520WS v2 due to improper handling of

syntactically invalid input.  Crafted inputs

can trigger a processing error, causing the RTSP service to enter non-responsive

state.

Successful

exploitation may cause the RTSP in a denial-of-service condition.

The record
Technical detail
CVSS v4.0
7.1 · HIGH
Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00334 · 25.5th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2026-06-05T16:14Z
EPSS history
Timeline
  • 05 JUN 16:14Z
    Denial-of-Service Vulnerability in RTSP Input Handling on TP-Link's Tapo C520WS
    cvelistv5