{"schema":"threatline.record/2","record":{"id":"CVE-2026-105810","aliases":[],"summary":"Authenticated Local Stack Overflow in TP-Link Tapo C320WS","details":"Tapo C320WS\nV2.0 contains an authenticated stack-based buffer overflow in the local\nonboarding Wi-Fi configuration path. An authenticated attacker on the\nadjacent network can submit a crafted request containing an oversized encrypted\npassword field, overwrite stack state, and execute commands with root\nprivileges.\n\n\n\n\n\nSuccessful\nexploitation may allow an authenticated adjacent-network attacker to take\ncontrol of the affected camera, modify camera behavior, access sensitive local\nconfiguration, and disrupt device availability.","categories":["Network & edge"],"product":"Tapo C320WS v2","vendor":"TP-Link Systems Inc.","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-105810","source_modified_at":"2026-10-20T19:23:34.083Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"Tapo C320WS v2","vendor":"TP-Link Systems Inc.","versions":[{"status":"affected","version":"0","lessThan":"1.6.6 Build 260917 Rel.81089n","versionType":"custom"}],"defaultStatus":"unaffected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-105810","source_modified_at":"2026-10-20T19:23:34.083Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Tapo C320WS v2","ecosystem":null},"version":"1.6.6 Build 260917 Rel.81089n","basis":"first unaffected version stated in the CVE record"}],"cvss":8.5,"severity":"High","kev":{"listed":false},"epss":{"probability":0.002,"percentile":0.09346,"score_date":"2026-10-23"},"published_at":"2026-10-19T17:46:42.190Z","modified_at":"2026-10-20T19:23:34.083Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-105810","fetched_at":"2026-10-23T18:45:31.882637Z","source_modified_at":"2026-10-20T19:23:34.083Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-105810","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://www.tp-link.com/us/support/download/tapo-c320ws/#Firmware-Release-Notes","tags":["patch"]},{"source":"CVE List","url":"https://www.tp-link.com/en/support/download/tapo-c320ws/v2/#Firmware-Release-Notes","tags":["patch"]},{"source":"CVE List","url":"https://www.tp-link.com/us/support/faq/5351/","tags":["vendor-advisory"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"none","automatable":"no","technical_impact":"total","assessed_at":"2026-10-20T19:23:25.959359Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"vendor and product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-20T19:23:34.083Z","content_hash":"40b273fcca9034017465a5c2b7478f3c9fcf925e8222859cf6f1e6d59f38e69b"}}