CVE-2026-1871 — MEDIUM (6.5)

Vulnerability Description

TP-Link Tapo C200 v5 contains a stack-based buffer overflow flaw in RTSP authentication handling due to improper validation of Authorization header field lengths, which can be triggered by a crafted authentication request. Successful exploitation causes the affected RTSP core service process to crash and triggers an automatic system reboot, resulting in a denial of service (DoS) condition. This prevents legitimate users from accessing the camera’s live video stream or management interface until the service restarts.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

NONE

Availability

HIGH

Affected Products

Vendor	Product	Versions
Tp-Link	Tapo C200 Firmware	1.0.5
Tp-Link	Tapo C200	5

Related Weaknesses (CWE)

CWE-121

References

https://www.tp-link.com/en/support/download/tapo-c200/v5/#Firmware-Release-NotesRelease Notes
https://www.tp-link.com/kr/support/download/tapo-c200/#Firmware-Release-NotesRelease Notes
https://www.tp-link.com/us/support/download/tapo-c200/v5/#Firmware-Release-NotesRelease Notes
https://www.tp-link.com/us/support/faq/5113/Vendor Advisory

FAQ

What is CVE-2026-1871?

CVE-2026-1871 is a vulnerability with a CVSS score of 6.5 (MEDIUM). TP-Link Tapo C200 v5 contains a stack-based buffer overflow flaw in RTSP authentication handling due to improper validation of Authorization header field lengths, which can be triggered by a crafted a...

How severe is CVE-2026-1871?

CVE-2026-1871 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-1871?

Check the references section above for vendor advisories and patch information. Affected products include: Tp-Link Tapo C200 Firmware, Tp-Link Tapo C200.