tag
Tp-Link
Critical
TP-Link Tapo C260 Unauthenticated-to-Root RCE Chain — CVE-2026-0651
CVE-2026-0651 (chained with CVE-2026-0652, CVE-2026-0653)·
TP-Link Tapo C260 IP camera (pre-patch firmware, shared /bin/main omnibus binary across models)
unpatched
Critical
TP-Link DHCP Option 66 Unauthenticated RCE — CVE-2026-11834
CVE-2026-11834·
TP-Link router firmware (libcmm.so DHCP client), tested on Archer C20 V6
unpatched