CVE-2026-1871

EUVD-2026-33978
TP-Link Tapo C200 v5 contains a stack-based buffer overflow flaw in RTSP authentication handling due to improper validation of Authorization header field lengths, which can be triggered by a crafted authentication request.

Successful exploitation causes the affected RTSP core service process to crash and triggers an automatic system reboot, resulting in a denial of service (DoS) condition.  This prevents legitimate users from accessing the camera’s live video stream or management interface until the service restarts.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 MEDIUM
ADJACENT_NETWORK
LOW
NONE
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 22%
Affected Products (NVD)
VendorProductVersion
tp-linktapo_c200_firmware
1.0.5:build_240327
tp-linktapo_c200_firmware
1.0.12:build_240527
tp-linktapo_c200_firmware
1.0.13:build_240619
tp-linktapo_c200_firmware
1.0.17:build_240806
tp-linktapo_c200_firmware
1.1.4:build_241219
tp-linktapo_c200_firmware
1.1.8:build_250310
tp-linktapo_c200_firmware
1.2.3:build_250610
tp-linktapo_c200_firmware
1.3.1:build_250910
tp-linktapo_c200_firmware
1.3.3:build_251119
tp-linktapo_c200_firmware
1.3.5:build_260228
𝑥
= Vulnerable software versions