Improper Authentication Vulnerability in Tapo C200 Version 5 by TP-Link

CVE-2026-15315

What is CVE-2026-15315?

The Tapo C200 version 5 from TP-Link has a significant vulnerability in its login authentication module. This improper authentication flaw allows attackers on the same local network to exploit weaknesses in the validation of challenge parameters. By doing so, they can bypass standard authentication controls and gain access to administrative session tokens. Such unauthorized access can enable attackers to perform privileged management actions and disrupt device services, potentially leading to a denial-of-service (DoS) condition. It is crucial for users to apply security patches and updates to mitigate this risk.

References