Attributed metadata history
Up to 100 retained publisher events per page for ad6295ecc2014987712595b606b1ffb65cdc683ee233090331fe58d48b8b90b9. Withdrawals and unavailable references remain attributed to their publishers.
intelligence_src_350d40f2cc69277bca
observed · 2026-10-12 08:34:02 UTC
available
Fingerprint: fe0fdc07a129ff203534388ab215df24d870069207d85287923a2a35a12b5578
intelligence_src_350d40f2cc69277bca
observed · 2026-10-12 08:34:02 UTC
An attacker sending a malformed HTTP POST request over LAN to a TP-Link Smart camera device can trigger the vulnerability described here. This report describes a heap buffer overflow, which leads to remote code execution. The vulnerability we are disclosing in this advisory affected a wide range of TP-Link devices, including TAPO Smart Cameras. A TP-Link Security Advisory released in April 2026 contains this vulnerability as CVE-2026-34119. Vulnerability Details another overflow similar to CVE-2026-34118 was present within the main HTTP parser function. This vulnerability can be triggered when more than one receive is required to read the full contents of the body.
Fingerprint: 0a76dbfc4a7a10490c326867dc90b1bb679d00670fe11ac32cd14f17178f407b