Improper Input Validation Vulnerability in Tapo C200 by TP-Link

CVE-2026-15316

What is CVE-2026-15316?

An improper input validation vulnerability exists in the configuration service of TP-Link's Tapo C200 v5, affecting its ability to process encrypted credential data. By sending oversized encrypted ciphertext values, an attacker may trigger exception handling failures due to inadequate validation, which can lead to device crashes or restarts. This exploitation could result in temporary disruptions of HTTPS management and monitoring functionalities, essentially causing a denial-of-service condition until the service is restored.

News Articles

Arabian Post

CVE-2026-15315CVE-2026-15316

TP-Link camera flaws expose feeds to unauthorised access

Two security flaws in TP-Link Tapo cameras can let attackers bypass authentication gain administrator access and potentially view live video or stored

2 weeks ago

Cybersecuritynews

CVE-2026-15316CVE-2026-15315

TP-Link Cameras 0-Day Vulnerabilities Allow Attackers to Spy on Users

Two zero-day flaws in TP-Link Tapo C200 cameras could let same-network attackers bypass authentication or disrupt camera services.

2 weeks ago

References