TP-Link Tapo C200 v3 IPv4 Fragmentation DoS Vulnerability Advisory (CVE-2026-12760)

Vulnerability Overview Vulnerability Name: Denial-of-Service Vulnerability CVE Number: CVE-2026-12760 CVSS Score: 7.1 / High Description: A Denial of Service (DoS) vulnerability was identified in the network packet processing logic of the Tapo C200 v3 due to improper handling of IPv4 fragmented packets. Unauthenticated, adjacent attackers can send crafted packets that cause excessive resource consumption, leading to device instability. Successful exploitation can remotely trigger a temporary Denial of Service state, rendering the camera unresponsive and interrupting video surveillance and recording. Scope of Impact Affected Products/Versions: - Product Model: Tapo C200 - Hardware Version: V3 - Fixed Version: 1.4.4 Build 250922 Remediation Recommended Measures: 1. Follow the instructions to update to the latest firmware version to patch the vulnerability: - US: Download for Tapo C200 - EN: Download for Tapo C200 Additional Information Disclaimer: This advisory is for reference only and may be subject to change without prior notice. TP-Link recommends that customers promptly apply the firmware updates provided in this advisory or implement documented workarounds. Devices/systems that are not updated or do not have the vulnerability mitigated as described may remain susceptible to attacks. TP-Link assumes no liability or responsibility for any damages or losses arising from the implementation of these updates. Related Links Related FAQs: - How to configure port security features - WPA2 Security / KRACK Vulnerability Statement - GhostDNS Malware Security More Resources: - Make hotel WiFi secure and easy to use - What is home network security, and how can I protect my WiFi router? Community Support TP-Link Community: Visit the community to get help, ask questions, and receive support from TP-Link experts and other users. Subscription & Contact Subscription: Enter your email address to receive exclusive offers and news. Social Media: Follow TP-Link on Facebook, Instagram, YouTube, LinkedIn, and Pinterest. Footer Information About Us: Includes company information, sustainability, privacy policy, etc. Partners: Includes partner programs, partner registration, MAP policy, etc. Learning Center: Includes technology trends, training, and certifications, etc. Promotions: Includes Prime Deals Up to 50% off, etc. Copyright Information Copyright: ©2026 TP-Link Systems Inc. and its affiliated companies. All rights reserved. Region: United States / English --- Note: POC code or exploitation code is not included in this page.

Goal Reached Thanks to every supporter — we hit 100%!

TP-Link Tapo C200 v3 IPv4 Fragmentation DoS Vulnerability Advisory (CVE-2026-12760)