Multiple TP-Link Vulnerabilities Let Attackers Trigger DoS and Crash Routers

Multiple high-severity vulnerabilities were discovered in TP-Link Tapo C520WS smart cameras (affecting v2.6 firmware before 1.2.4 Build 260326 Rel.24666n), including an authentication bypass (CVE-2026-34121, CVSS 8.7) and several heap/stack/path-expansion buffer overflows (CVE-2026-34118/19/20/22/24; CVSS 7.1). These flaws allow adjacent attackers to bypass authentication, perform unauthorized configuration changes, crash devices, or trigger DoS, creating immediate physical security blind spots; users are urged to apply TP-Link's urgent firmware updates immediately.