Dashboard / CVE-2026-34121

CVE-2026-34121

HIGH
MEDIUM Priority: 0.04 BB Relevance: 62/100
Published: 2026-04-02 Modified: 2026-11-02 First seen: 2026-11-02 Status: active

Attack Surface

Adjacent Low Complexity No Auth No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Adjacent
AC: Low
PR: None
UI: None
S: X
AT: None
VC: High
VI: High
VA: High

Description

An authentication bypass vulnerability within the HTTP handling of the DS configuration service in TP-Link Tapo C520WS v2.6 and C210 v3 was identified, due to inconsistent parsing and authorization logic in JSON requests during authentication check. An unauthenticated attacker can append an authentication-exempt action to a request containing privileged DS do actions, bypassing authorization checks. Successful exploitation allows unauthenticated execution of restricted configuration actions, which may result in unauthorized modification of device state.

Weakness Classification (1)

Affected Software (3)

VendorProductVersion
TP Link Systems Inc. Tapo C210 v3.6 0 < 1.2.7 Build 260818 Rel.64715n
TP-Link Systems Inc. Tapo C520WS v2.6 0 < 1.2.4 Build 260326 Rel.24666n
tp-link tapo_c520ws_firmware < 1.2.4

References & Advisories (4)

Bug Bounty Relevance

62 / 100
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

8.7 / 10.0 v4.0
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.47%
Raw Score 0.004690
Percentile 40.7%
Date 2026-11-05

EPSS Trend

2026-11-05
0.00469
2026-11-04
0.00469
2026-11-03
0.00469
2026-11-02
0.00469

Intelligence Sources

mitre ref →
nvd ref →

External Links