CVE-2026-153167.1HighCWE-20
TP-Link Systems Inc. Tapo C200 v5 vulnerability
TP-Link Systems Inc. · Tapo C200 v5
Not in CISA KEVVendor fix available
0.3%probability of exploitation in the next 30 days
26th percentile
050100
Higher than 26% of scored CVEs
7.1HighCVSS 4.0
LowMediumHighCrit.
DescriptionNVD
An improper input validation vulnerability in the configuration service for processing encrypted credential data has been identified in Tapo C200 v5. An attacker can send oversized crypted ciphertext values that may trigger exception handling failures, due to insufficient validation, causing the affected device to crash or restart. Successful exploitation may temporarily disrupt HTTPS management and monitoring functionality, resulting in a denial-of-service (DoS) condition until the service recovers.
Coverage1 article · 1 outlet
First in our coverage: Infosecurity, 16 Sep.
- TP-Link Tapo C200 Flaws Expose Camera Feeds to Network AttackersInfosecurity · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.