PatchSiren cyber security CVE debrief

CVE-2026-6250 TP-Link Systems Inc. CVE debrief

CVE-2026-6250 is an authenticated format string vulnerability in the ONVIF service of Tapo C110 v2. This vulnerability allows a remote authenticated attacker to manipulate stack memory, including control flow data such as return addresses, by interpreting externally controlled data as a format string. Consequently, the attacker may redirect execution flow to existing internal functions, triggering an unauthorized factory reset. This can lead to loss of configuration, deletion of stored credentials, and service disruption.

Vendor: TP-Link Systems Inc.
Product: Tapo C110 v2
CVSS: HIGH 7
CISA KEV: Not listed in stored evidence
Original CVE published: 2026-06-11
Original CVE updated: 2026-06-16
Advisory published: 2026-06-11
Advisory updated: 2026-06-16

Who should care

Users of Tapo C110 v2 devices should be aware of this vulnerability and take necessary actions to mitigate the risk.

Technical summary

The vulnerability exists due to improper handling of user-controlled input in the ONVIF service of Tapo C110 v2. A remote authenticated attacker can exploit this vulnerability to manipulate stack memory and potentially execute arbitrary code.

Defensive priority

High

Recommended defensive actions

Apply firmware updates from the vendor as soon as they become available.
Restrict access to the ONVIF service to only trusted users and networks.
Monitor device logs for suspicious activity.

Evidence notes

The CVE record and NVD detail pages provide additional information about this vulnerability.

Sources and references

Verified primary and authoritative sources

CVE-2026-6250 CVE Program record
Publisher, destination, and source semantics verified

URL: https://www.cve.org/CVERecord?id=CVE-2026-6250

CVE Program - Official CVE Program record with source-provided CVE metadata.
CVE-2026-6250 NVD vulnerability detail
Publisher, destination, and source semantics verified

URL: https://nvd.nist.gov/vuln/detail/CVE-2026-6250

NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Source reference
Unverified legacy reference

URL: https://www.tp-link.com/en/support/download/tapo-c110/v2/

f23511db-6c3e-4e32-a477-6aa17d310630
Source reference
Unverified legacy reference

URL: https://www.tp-link.com/kr/support/download/tapo-c110/v2/

f23511db-6c3e-4e32-a477-6aa17d310630
Source reference
Unverified legacy reference

URL: https://www.tp-link.com/us/support/download/tapo-c110/v2/

f23511db-6c3e-4e32-a477-6aa17d310630
Source reference
Unverified legacy reference

URL: https://www.tp-link.com/us/support/faq/5128/

f23511db-6c3e-4e32-a477-6aa17d310630

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.