What is the CVSS score of CVE-2026-1315?

CVE-2026-1315 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.2%.

Which versions of Tapo C520ws Firmware are affected by CVE-2026-1315?

TP-Link Tapo C220 v1 and C520WS v2 cameras contain a critical vulnerability allowing attackers to disable core system services without authentication.

How to fix or mitigate CVE-2026-1315?

Within 24 hours: Inventory all Tapo C220 v1 and C520WS v2 devices and isolate them to dedicated network segments. Within 7 days: Disable firmware update endpoints at the network perimeter using firewall rules and disable UPnP if enabled. Within 30 days: Plan replacement of affected devices with patched firmware versions or alternative vendors; contact TP-Link for patch timeline and interim security updates.

Tapo C520ws Firmware CVE-2026-1315

HIGH

Improper Input Validation (CWE-20)

2026-01-27 f23511db-6c3e-4e32-a477-6aa17d310630

Denial Of Service Tapo C520ws Firmware Tapo C220 Firmware

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Jan 27, 2026 - 18:15 nvd

HIGH 7.5

DescriptionCVE.org

By sending crafted files to the firmware update endpoint of Tapo C220 v1 and C520WS v2, the device terminates core system services before verifying authentication or firmware integrity. An unauthenticated attacker can trigger a persistent denial of service, requiring a manual reboot or application initiated restart to restore normal device operation.

AnalysisAI

Unauthenticated remote attackers can crash core system services on Tapo C220 and C520WS cameras by sending specially crafted files to the firmware update endpoint, bypassing authentication and integrity checks. This results in a persistent denial of service condition that requires manual device reboot to restore functionality. No patch is currently available for affected firmware versions.

Technical ContextAI

Classified as CWE-20 (Improper Input Validation). Affects Tapo C220 Firmware. By sending crafted files to the firmware update endpoint of Tapo C220 v1 and C520WS v2, the device terminates core system services before verifying authentication or firmware integrity. An unauthenticated attacker can trigger a persistent denial of service, requiring a manual reboot or application initiated restart to restore normal device operation.