PoC Archive PoC Archive

tag

Tp-Link

Critical
TP-Link Tapo C260 Unauthenticated-to-Root RCE Chain — CVE-2026-0651
CVE-2026-0651 (chained with CVE-2026-0652, CVE-2026-0653)· TP-Link Tapo C260 IP camera (pre-patch firmware, shared /bin/main omnibus binary across models) unpatched
Critical
TP-Link DHCP Option 66 Unauthenticated RCE — CVE-2026-11834
CVE-2026-11834· TP-Link router firmware (libcmm.so DHCP client), tested on Archer C20 V6 unpatched