TP-Link Systems Inc. Tapo C100 V5
5 CVEs affecting TP-Link Systems Inc. Tapo C100 V5. Latest disclosed: 2026-08-19. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-14300 | High | 8.1 | 2025-12-20 | The HTTPS service on Tapo C200 v3, v5, C425 v1.2 and C100 v5 exposes a connectAP interface without proper authentication. An unauthenticated attacker on the s… |
CVE-2026-0918 | High | 7.5 | 2026-01-27 | The Tapo C100 v5, C220 v1 and C520WS v2 cameras’ HTTP service does not safely handle POST requests containing an excessively large Content-Length header. The r… |
CVE-2026-75618 | Medium | 6.5 | 2026-08-19 | Tapo C100/C101 V5 contains a null pointer dereference vulnerability in the RTSP service. An attacker on the local network can send specially crafted requests t… |
CVE-2026-34118 | Medium | 6.5 | 2026-04-02 | A heap-based buffer overflow vulnerability was identified in TP-Link Tapo C100/C101 v5, C520WS v2.6 in the HTTP POST body parsing logic due to missing validati… |
CVE-2026-75619 | Medium | 5.7 | 2026-08-19 | Tapo C100/C101 V5 contains a heap-based buffer overflow vulnerability in the RTSP service. An authenticated attacker on the local network can send specially cr… |