Skip to content
Tp-link Tapo vulnerabilities
-
tp-link tapo c100 firmware, tapo c101 firmware, tp-link systems inc. tapo c100 v5 +1 more +3 more
RTSP Heap Buffer Overflow Denial-of-Service Vulnerability on TP-Link Tapo C100 and C101
CVE-2026-75619
6.9 Medium
-
tp-link tapo c100 firmware, tapo c101 firmware, tp-link systems inc. tapo c100 v5 +1 more +3 more
RTSP Null Pointer Dereference Denial-of-Service Vulnerability on TP-Link Tapo C100 and C101
CVE-2026-75618
7.1 High
-
tp-link systems inc. tapo c200 v5, tp-link tapo c200 firmware +1 more
Denial-of-Service via Oversized Encrypted Credential Input in TP-Link Tapo C200
CVE-2026-15316
7.1 High
-
tp-link systems inc tapo c120 v1, tp-link tapo c120 firmware, tapo c200 firmware +1 more +3 more
Unauthenticated Administrative Authentication Bypass via device_confirm Replay in TP-Link Tapo C120 and C200
CVE-2026-15315
Public exploit
8.7 High
-
tp-link systems inc. p110 v1, tp-link tapo p110 firmware +1 more
Authenticated Denial-of-Service Vulnerability in TP-Link Tapo P110
CVE-2026-15314
7.1 High
-
tp-link systems inc. tapo c200 v3, tp-link tapo c200 firmware +1 more
Denial-of-Service Vulnerability via Malformed IPv4 Fragmentation Handling in TP-Link Tapo C200
CVE-2026-12760
7.1 High
-
tp-link tapo c110 firmware, tp-link systems inc. tapo c110 v2 +1 more
Authenticated Format String Injection on TP-Link Tapo C110
CVE-2026-6250
7.0 High
-
tp-link systems inc. tapo c520ws v2, tp-link tapo c520ws firmware +1 more
Denial-of-Service Vulnerability in RTSP Input Handling on TP-Link's Tapo C520WS
CVE-2026-8714
7.1 High
-
tp-link systems inc. tapo c200 v5, tp-link tapo c200 firmware +1 more
Authenticated Stack-based Buffer Overflow in RTSP Authentication of Tapo C200
CVE-2026-1871
7.1 High
-
tp link systems inc. tapo d100c v1.0, tp-link systems inc. tapo p300 v1.0, tp-link tapo d100c firmware +3 more +5 more
Bluetooth Communication Uses Unencrypted Transmission During Initial Setup on TP-Link's Tapo L535E, P300 and D100C
CVE-2026-34126
7.3 High
-
tp-link systems inc. tapo c520ws v2.6, tp-link tapo c520ws firmware +1 more
Denial of Service via Path Expansion Overflow in HTTP Service in TP-Link Tapo C520WS
CVE-2026-34124
7.1 High
-
tp-link systems inc. tapo c520ws v2.6, tp-link tapo c520ws firmware +1 more
Stack-based Buffer Overflow Leading to Denial of Service in TP-Link Tapo C520WS
CVE-2026-34122
7.1 High
-
tp-link systems inc. tapo c520ws v2.6, tp link systems inc. tapo c210 v3.6, tp-link tapo c520ws firmware +2 more
Authentication Bypass in DS Configuration Service via HTTP Request Parsing Differential of TP-Link Tapo C520WS and C210
CVE-2026-34121
8.7 High
-
tp-link systems inc. tapo c520ws v2.6, tp-link tapo c520ws firmware +1 more
Heap-based Buffer Overflow Vulnerability Leading to Denial-of-Service in TP-Link Tapo C520WS
CVE-2026-34120
7.1 High
-
tp-link systems inc. tapo c520ws v2.6, tp-link tapo c520ws firmware +1 more
Heap-based Buffer Overflow Vulnerability Leading to Denial-of-Service in TP-Link Tapo C520WS
CVE-2026-34119
7.1 High
-
tp link systems inc. tapo c100 v5, tapo c101 v5, tapo c200 v3 +4 more +6 more
Heap-based Buffer Overflow Vulnerability Leading to Denial-of-Service in multiple TP-Link Tapo Cameras
CVE-2026-34118
7.1 High
-
tp link systems inc. omada app, tp-link aginet, deco +21 more +23 more
Insufficient Certificate Validation in Multiple Mobile Applications Allows Man in the Middle Interception
CVE-2025-9293
7.7 High
-
tp-link omada, tp-link systems inc. omada cloud controller, tp-link aginet +12 more +14 more
Permissive Web Security Policy Allows Cross-Origin Access Control Bypass on Omada Cloud Controllers
CVE-2025-9292
2.0 Low
-
tp-link systems inc. tapo c260 v1, tp link systems inc. tapo c211 v2, tapo c520ws v2.6 +2 more +4 more
Path Traversal on TP-Link Tapo D235, C211, C520WS and C260 via Local https
CVE-2026-0651
Public exploit
6.9 Medium
-
tp-link systems inc. tapo c260 v1, tp-link tapo c260 firmware +1 more
Remote Code Execution on TP-Link Tapo C260 by Guest User
CVE-2026-0652
EPSS 23.3%
8.7 High
-
tp-link systems inc. tapo c260 v1, tp-link tapo c260 firmware, tp-link systems inc. tapo d235 v1 +2 more
Insecure Access Control on TP-Link Tapo D235 and C260
CVE-2026-0653
7.2 High
-
tp-link systems inc. tapo h100 v1, tapo p100 v1, tp-link tapo h100 firmware +1 more +3 more
Improper Certificate Validation in TP-Link Tapo H100 and P100 Allows Man-in-the-Middle Attack
CVE-2025-15557
7.5 High
-
tp-link systems inc. tapo c220 v1, tp-link tapo c220 firmware, tapo c520ws firmware +1 more +3 more
Unauthenticated Denial of Service via Firmware Update Endpoint on TP-Link Tapo C220 & C520WS
CVE-2026-1315
7.1 High
-
tp link systems inc. tapo c210 v3, tp-link tapo c220 firmware, tapo c520ws firmware +2 more +4 more
Unauthenticated Denial of Service via Oversized URL in HTTP Parser on TP-Link Tapo C210, C220 & C520WS
CVE-2026-0919
7.1 High
-
tp-link systems inc. tapo c100 v5, tp-link tapo c220 firmware, tapo c520ws firmware +2 more +4 more
Null Pointer Dereference in Tapo SmartCam HTTP Service on TP-Link Tapo C220 & C520WS
CVE-2026-0918
7.1 High
-
tp-link tapo c200, tp link systems inc. tapo c100 v5, tapo c425 v1.2 +1 more +3 more
Unauthenticated Access to connectAP API Endpoint on Tapo C100, C200 & C425
CVE-2025-14300
8.7 High
-
tp-link systems inc. tapo c200 v3, tp-link tapo c200 firmware +1 more
Improper Content-Length Validation in HTTPS Requests on Tapo C200
CVE-2025-14299
7.1 High
-
tp-link systems inc. tapo c200 v3, tp-link tapo c200 firmware, tp-link systems inc. tapo c520ws v2.6 +2 more
Remote Code Execution via Stack-based Buffer Overflow in ONVIF SOAP Parser in TP-Link Tapo C200 and C520WS
CVE-2025-8065
8.7 High
-
tp-link tapo h200 v1 iot smart hub
Information Disclosure Vulnerability in TP-Link Tapo IoT Smart Hub
CVE-2025-3442
4.4 Medium
-
tp-link tapo c500 v1 wi-fi camera, tapo c500 v2 wi-fi camera +1 more
Information Disclosure Vulnerability in TP-Link Tapo C500 Wi-Fi Camera
CVE-2025-1099
7.0 High
-
tp-link tapo h100 firmware, tapo h100 iot smart hub +1 more
Information Disclosure Vulnerability in TP-Link IoT Smart Hub
CVE-2024-10523
4.4 Medium
-
tp-link tapo, tether +1 more
TP-Link Tether versions prior to 4.5.13 and TP-Link Tapo versions prior to 3.3.6 do not properly...
CVE-2024-31340
4.8 Medium
-
tp-link c210, tapo c210, tapo c210 firmware +2 more
TP-Link Tapo C210 ActiveCells Stack-based Buffer Overflow Remote Code Execution Vulnerability
CVE-2023-41184
6.8 Medium
-
tp-link tapo c210, tapo c210 firmware +1 more
TP-Link Tapo C210 Password Recovery Authentication Bypass Vulnerability
CVE-2023-35717
8.8 High
-
tp-link tapo c200 firmware, tapo c200 v3 firmware, tapo tc70 firmware +2 more
Insecure Permissiosn vulnerability in TP Link TC70 and C200 WIFI Camera v.3 firmware v.1.3.4 and...
CVE-2023-49515
4.6 Medium
-
tp-link tapo
TP-Link Tapo APK up to v2.12.703 uses hardcoded credentials for access to the login panel.
CVE-2023-27098
7.5 High
-
tp-link tapo
Incorrect access control in TP-Link Tapo before v3.1.315 allows attackers to access user...
CVE-2023-34829
6.5 Medium
-
tp-link tapo c100, tapo c100 firmware +1 more
An issue in TP-Link Tapo C100 v1.1.15 Build 211130 Rel.15378n(4555) and before allows attackers...
CVE-2023-39610
6.5 Medium
-
tp-link tapo, tapo l530e firmware +1 more
An issue in TPLink Smart bulb Tapo series L530 v.1.0.0 and Tapo Application v.2.8.14 allows a...
CVE-2023-38907
7.5 High
-
tp-link tapo, tapo l530e firmware +1 more
An issue in TPLink Smart bulb Tapo series L530 v.1.0.0 and Tapo Application v.2.8.14 allows a...
CVE-2023-38909
6.5 Medium
-
tp-link tapo, tapo l530e firmware +1 more
An issue in TPLink Smart bulb Tapo series L530 v.1.0.0 and Tapo Application v.2.8.14 allows a...
CVE-2023-38908
6.5 Medium
-
tp-link tapo, tapo l530e firmware +1 more
An issue in TPLink Smart bulb Tapo series L530 v.1.0.0 and Tapo Application v.2.8.14 allows a...
CVE-2023-38906
6.5 Medium
-
tp-link tapo c200 firmware
The AES Key-IV pair used by the TP-Link TAPO C200 camera V3 (EU) on firmware version 1.1.22 Build...
CVE-2023-27126
4.6 Medium
-
tp-link tapo c310 firmware
TP-Link Tapo C310 1.3.0 devices allow access to the RTSP video feed via credentials of User ---...
CVE-2022-37255
Public exploit
7.5 High
-
tp-link tapo c200 v1 firmware
An access control issue on TP-LInk Tapo C200 V1 devices allows physically proximate attackers to...
CVE-2022-41505
6.4 Medium
-
tp-link tapo c200, tapo c200 firmware +1 more
TP-LINK Tapo C200 remote code execution vulnerability
CVE-2021-4045
Public exploit
EPSS 72.4%
9.8 Critical
-
tp-link kc200 firmware, kc300s2 firmware, kc310s2 firmware +12 more +14 more
TP-Link cloud cameras through 2020-02-09 allow remote attackers to bypass authentication and...
CVE-2020-11445
5.3 Medium