https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 21:59:01 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-278849 EUVD-2026-278849 https://cve.radiocsirt.org/vuln/euvd-2026-278849 https://cve.radiocsirt.org/vuln/fkie_cve-2026-34121 <p>An authentication bypass vulnerability within the HTTP handling of the DS configuration service in TP-Link Tapo C520WS v2.6 was identified, due to inconsistent parsing and authorization logic in JSON requests during authentication check. An unauthenticated attacker can append an authentication-exempt action to a request containing privileged DS do actions, bypassing authorization checks.</p> <p>Successful exploitation allows unauthenticated execution of restricted configuration actions, which may result in unauthorized modification of device state.</p> <p>An authentication bypass vulnerability within the HTTP handling of the DS configuration service in TP-Link Tapo C520WS v2.6 was identified, due to inconsistent parsing and authorization logic in JSON requests during authentication check. An unauthenticated attacker can append an authentication-exempt action to a request containing privileged DS do actions, bypassing authorization checks.</p> <p>Successful exploitation allows unauthenticated execution of restricted configuration actions, which may result in unauthorized modification of device state.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-34121 https://cve.radiocsirt.org/vuln/ghsa-wfj8-p8xg-8j7g <p>An authentication bypass vulnerability within the HTTP handling of the DS configuration service in TP-Link Tapo C520WS v2.6 was identified, due to inconsistent parsing and authorization logic in JSON requests during authentication check. An unauthenticated attacker can append an authentication-exempt action to a request containing privileged DS do actions, bypassing authorization checks.</p> <p>Successful exploitation allows unauthenticated execution of restricted configuration actions, which may result in unauthorized modification of device state.</p> <p>An authentication bypass vulnerability within the HTTP handling of the DS configuration service in TP-Link Tapo C520WS v2.6 was identified, due to inconsistent parsing and authorization logic in JSON requests during authentication check. An unauthenticated attacker can append an authentication-exempt action to a request containing privileged DS do actions, bypassing authorization checks.</p> <p>Successful exploitation allows unauthenticated execution of restricted configuration actions, which may result in unauthorized modification of device state.</p> https://cve.radiocsirt.org/vuln/ghsa-wfj8-p8xg-8j7g