CVE-2026-0918

216.73.216.75

· Published 27/01/2026 18:15 · Modified 27/01/2026 18:15

Labels: CVE-2026-0918 2026-01-27 CVE-2026-0918 CWE-476 f23511db-6c3e-4e32-a477-6aa17d310630

Essential information

Published: 27/01/2026 18:15
Modified: 27/01/2026 18:15
Author: —
Creator: —
CVSS: 7.1 HIGH (v3) 7.1 HIGH (v4.0)
CISA KEV: No
CWE: —
CVSS vector: —

CVSS metrics

Description

The Tapo C220 v1 and C520WS v2 cameras’ HTTP service does not safely handle POST requests containing an excessively large Content-Length header. The resulting failed memory allocation triggers a NULL pointer dereference, causing the main service process to crash. An unauthenticated attacker can repeatedly crash the service, causing temporary denial of service. The device restarts automatically, and repeated requests can keep it unavailable.

NVD status

Status: Received — CVE has been recently published to the CVE List and has been received by the NVD.
Source: f23511db-6c3e-4e32-a477-6aa17d310630
NVD: View on NVD

Affected products (CPE)

Product	CPE
tapo / tapo c220	`cpe:2.3:a:tapo:tapo_c220::::::::`
tapo / tapo c520ws v2	`cpe:2.3:a:tapo:tapo_c520ws_v2::::::::`