TP-Link Systems Inc. Tapo C200 V5
7 CVEs affecting TP-Link Systems Inc. Tapo C200 V5. Latest disclosed: 2026-10-01. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-15315 | High | 8.8 | 2026-08-18 | Tapo C120 v1 and C200 v5 contain an improper authentication vulnerability within the login authentication verification module. An attacker on the local network… |
CVE-2026-15316 | Medium | 6.5 | 2026-08-18 | An improper input validation vulnerability in the configuration service for processing encrypted credential data has been identified in Tapo C200 v5. An attac… |
CVE-2026-1871 | Medium | 6.5 | 2026-06-02 | TP-Link Tapo C200 v5 contains a stack-based buffer overflow flaw in RTSP authentication handling due to improper validation of Authorization header field lengt… |
CVE-2026-9032 | | 2026-10-01 | Tapo C120 v1 and C200 v5 contain a NULL pointer dereference in the HTTPS onboarding connect request parser. The interface is reachable without authentication… | |
CVE-2026-78578 | | 2026-10-01 | Tapo C120 v1 and C200 v5 do not enforce authentication for do method HTTPS onboarding connect actions after initial setup. An unauthenticated adjacent attacke… | |
CVE-2026-78577 | | 2026-10-01 | Tapo C120 v1 and C200 V5 contain a vulnerability in the HTTPS onboarding scan function due to missing authentication. After initial setup, an unauthenticated a… | |
CVE-2026-102369 | | 2026-10-01 | Tapo C120 v1 and C200 V5 do not adequately protect login challenge data or sanitize attacker-controlled input processed by the MacTool handler. An unauthentica… |