Filtered by vendor Tp-link Subscriptions
Filtered by product Tapo C110 Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-6250 1 Tp-link 1 Tapo C110 2026-06-12 N/A
An authenticated format string vulnerability exists in the ONVIF service of Tapo C110 v2 due to improper handling of user-controlled input.  Externally controlled data is interpreted as a format string, which can be used to manipulate stack memory, including control flow data such as return addresses. A remote authenticated attacker may redirect execution flow to existing internal functions, triggering an unauthorized factory reset, leading to loss of configuration, deletion of stored credentials and service disruption.