# CVE-2026-105810: TP-Link Tapo C320WS stack buffer overflow in Wi-Fi configuration

Source: https://junglewise.ai/threats/cve-2026-105810-tapo-c320ws-v2-0-contains-an-authenticated-stack-based-buffer  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-19. Updated: 2026-10-19  
License: CC BY 4.0 with a link back

CVE-2026-105810 · Severity: info · Published 2026-10-19

The TP-Link Tapo C320WS is a Wi-Fi outdoor security camera used to monitor homes and businesses. An authenticated attacker on the same network can exploit a buffer overflow in the camera's Wi-Fi setup feature to gain complete control, modify recordings, access sensitive settings, or disable the camera entirely. The attacker must already have network credentials but gains root-level privileges on the device.

Vendors: [TP-Link](https://junglewise.ai/threats/vendors/tp-link).

## Quick answers

**Is CVE-2026-105810 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-105810 being exploited in the wild.

**How severe is CVE-2026-105810?** Informational severity, published 19 October 2026.

**Which products and versions are affected?** TP-Link Tapo C320WS V2.0.

**Is there a fix for CVE-2026-105810?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-105810 attacked?** It is attacked from the adjacent network or over the network, in a network appliance.

**Am I affected by CVE-2026-105810?** Check whether you run TP-Link Tapo C320WS at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A stack-based buffer overflow exists in the local onboarding Wi-Fi configuration handler of Tapo C320WS V2.0. An authenticated adjacent-network attacker can send a crafted request with an oversized encrypted password field to trigger the overflow, overwrite stack state, and achieve arbitrary code execution with root privileges. The vulnerability requires adjacent network access and prior authentication.

## Affected products

- TP-Link Tapo C320WS V2.0

## Timeline

- 2026-10-19: disclosed

## References

- [https://www.tp-link.com/en/support/download/tapo-c320ws/v2/](https://www.tp-link.com/en/support/download/tapo-c320ws/v2/)
- [https://www.tp-link.com/us/support/download/tapo-c320ws/](https://www.tp-link.com/us/support/download/tapo-c320ws/)