Read the docs
TI-2026-12888 Aliases CVE-2026-15314GHSA-9xv7-g9xq-gqj2

Authenticated Denial-of-Service Vulnerability in TP-Link Tapo P110

Priority LOW 33CWE-120Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-120 and the CVSS impact.

Summary

Tapo P110 v1 smart Wi-Fi Plug contains an improper boundary validation vulnerability in the handling of authenticated HTTP request bodies due to insufficient input validation before memory copy operations. This may lead to buffer overflow condition, causing the web service process to crash. Successful exploitation may cause the web service process to stop responding or restart, resulting in a denial-of-service condition.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00759 55th percentileScored 2026-11-07
Fix Fixed P110 v1 (TP-Link Systems Inc.): V1_1.1.4 Build 260709

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
TP-LinkP110 v1before V1_1.1.4 Build 260709V1_1.1.4 Build 260709Patch availableCNA
  • P110 v1 VendorTP-Link Affected before V1_1.1.4 Build 260709 Fixed in V1_1.1.4 Build 260709 Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:o:tp-link:tapo_p110_firmware:*:*:*:*:*:*:*:*before 1.1.4VulnerableTP-Link
cpe:2.3:h:tp-link:tapo_p110:1.0:*:*:*:*:*:*:*1.0Running onTP-Link
  • cpe:2.3:o:tp-link:tapo_p110_firmware:*:*:*:*:*:*:*:* Versions before 1.1.4 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:tapo_p110:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·TP-Link

Remediation

  • Fix · CNA P110 v1 (TP-Link Systems Inc.) Fixed in V1_1.1.4 Build 260709

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-15314
  2. 2026-10-03 Alias added: GHSA-9xv7-g9xq-gqj2

References

Patch 2

Advisory 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences