CVE-2026-8714 HIGH

CVE-2026-8714: Denial-of-Service Vulnerability in RTSP Input Handling on TP-Link's Tapo C520WS

Vendor Tp-Link Systems Inc.
Product Tapo C520WS v2
Weakness CWE-20 · Input validation
Published June 5, 2026
Last update June 5, 2026
View on NVD All CVEs

CVSS base score

7.1/10
Attack vector Adjacent
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A denial-of-service vulnerability exists in the RTSP server component of TP-Link Tapo C520WS v2 due to improper handling of syntactically invalid input.  Crafted inputs can trigger a processing error, causing the RTSP service to enter non-responsive state. Successful exploitation may cause the RTSP in a denial-of-service condition.

Key dates

02Disclosure timeline

June 5, 2026 CVE published
June 5, 2026 Record updated