Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4f5q-mmm6-fj92

Опубликовано: 10 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.7
CVSS3: 8.8

Описание

On TP-Link Tapo C260 v1, command injection vulnerability exists due to improper sanitization in certain POST parameters during configuration synchronization. An authenticated attacker can execute arbitrary system commands with high impact on confidentiality, integrity and availability. It may cause full device compromise.

On TP-Link Tapo C260 v1, command injection vulnerability exists due to improper sanitization in certain POST parameters during configuration synchronization. An authenticated attacker can execute arbitrary system commands with high impact on confidentiality, integrity and availability. It may cause full device compromise.

EPSS

Процентиль: 97%
0.21577
Средний

8.7 High

CVSS4

8.8 High

CVSS3

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 8.8
nvd
6 месяцев назад

On TP-Link Tapo C260 v1, command injection vulnerability exists due to improper sanitization in certain POST parameters during configuration synchronization. An authenticated attacker can execute arbitrary system commands with high impact on confidentiality, integrity and availability. It may cause full device compromise.

CVSS3: 8.8
fstec
6 месяцев назад

Уязвимость микропрограммного обеспечения IP-камеры TP-Link Tapo C260, связанная с непринятием мер по нейтрализации специальных элементов, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 97%
0.21577
Средний

8.7 High

CVSS4

8.8 High

CVSS3

Дефекты

CWE-78