# CVE-2026-105673: TP-Link Tapo C325WB denial of service in RTSP streaming

Source: https://junglewise.ai/threats/cve-2026-105673-an-unauthenticated-denial-of-service-vulnerability-exists-in  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-08. Updated: 2026-10-16  
License: CC BY 4.0 with a link back

CVE-2026-105673 · Severity: info · Published 2026-10-08

The Tapo C325WB v2 outdoor security camera is vulnerable to an unauthenticated denial-of-service attack in its RTSP streaming service when the Camera Account feature is enabled. A remote attacker on the same network can crash the streaming daemon with specially crafted requests, disrupting live video feeds until the service restarts. This impacts surveillance capabilities and related stream-dependent features.

Vendors: [TP-Link](https://junglewise.ai/threats/vendors/tp-link).

## Quick answers

**Is CVE-2026-105673 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-105673 being exploited in the wild.

**How severe is CVE-2026-105673?** Informational severity, published 8 October 2026.

**Which products and versions are affected?** TP-Link Tapo C325WB v2.

**Is there a fix for CVE-2026-105673?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-105673 attacked?** It is attacked from the adjacent network or over the network, in a network appliance.

**Am I affected by CVE-2026-105673?** Check whether you run TP-Link Tapo C325WB at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

An unauthenticated denial-of-service vulnerability exists in the RTSP streaming service on TCP port 554. Maliciously crafted RTSP-over-HTTP tunneling requests cause memory corruption and crash the streaming daemon when the Camera Account feature is enabled. An adjacent-network attacker requires no authentication or user interaction to trigger the crash.

## Affected products

- TP-Link Tapo C325WB v2

## Timeline

- 2026-10-08: disclosed

## References

- [https://www.tp-link.com/en/support/download/tapo-c325wb/](https://www.tp-link.com/en/support/download/tapo-c325wb/)
- [https://www.tp-link.com/us/support/download/tapo-c325wb/](https://www.tp-link.com/us/support/download/tapo-c325wb/)

## Related threats

- [TP-Link Tapo C325WB V2 weak PSK generation in media streaming](https://junglewise.ai/threats/cve-2026-105674-tp-link-tapo-c325wb-v2-generates-the-pre-shared-key-used-by-its)