HIGH 7.1 NVD
CVE-2026-15316
An improper input validation vulnerability in the configuration service for processing encrypted credential data has been identified in Tapo C200 v5. An attack
An improper input
validation vulnerability in the configuration service for processing encrypted
credential data has been identified in Tapo C200 v5. An attacker can send oversized crypted
ciphertext values that may trigger exception handling failures, due to insufficient
validation, causing the affected device to crash or restart.
Successful
exploitation may temporarily disrupt HTTPS management and monitoring
functionality, resulting in a denial-of-service (DoS) condition until the
service recovers.
References
- https://www.tp-link.com/en/support/download/tapo-c200/v5/
- https://www.tp-link.com/us/support/download/tapo-c200/v5/
- https://www.tp-link.com/us/support/faq/5248/
This high severity vulnerability with a CVSS score of 7.1 was published on 2026-08-18 via NVD.
vulnfeed aggregates 11955 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.