Vulnerabilities

TI-2026-65366 CVE-2026-102369 · GHSA-xrj7-3q7x-59fm

Unauthenticated Remote Code Execution via MacTool Command Injection in TP-Link Tapo C120 & C200

LOW 39

Tapo C120 v1 and C200 V5 do not adequately protect login challenge data or sanitize attacker-controlled input processed by the MacTool handler.

CVSS 4.0HIGH 8.7 Adjacent network No auth No interaction EPSS 0.00268 Published 2026-10-01 Fixed in V5_1.4.6 Build 260709 Rel.27675n, V1_1.9.4 Build 260813 Rel.79754n CWE-287

TI-2026-54630 CVE-2026-78578 · GHSA-5hx8-fmw3-r64v

Missing authentication in TP-Link Tapo C200 v5

LOW 31

Tapo C120 v1 and C200 v5 do not enforce authentication for do method HTTPS onboarding connect actions after initial setup.

CVSS 4.0HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00273 Published 2026-10-01 Fixed in V5_1.4.6 Build 260709 Rel.27675n, V1_1.9.4 Build 260813 Rel.79754n CWE-306

TI-2026-54629 CVE-2026-78577 · GHSA-7ch5-88j9-f3v7

Unauthenticated Onboarding Scan Information Disclosure in TP-Link Tapo C120 & C200

LOW 23

Tapo C120 v1 and C200 V5 contain a vulnerability in the HTTPS onboarding scan function due to missing authentication.

CVSS 4.0MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00162 Published 2026-10-01 Fixed in V5_1.4.6 Build 260709 Rel.27675n, V1_1.9.4 Build 260813 Rel.79754n CWE-306

TI-2026-07939 CVE-2026-9032 · GHSA-gq3v-7fcg-vgjc

Unauthenticated Onboarding Connect NULL Pointer Dereference Denial of Service Vulnerability in TP-Link Tapo C120 & C200

LOW 30

Tapo C120 v1 and C200 v5 contain a NULL pointer dereference in the HTTPS onboarding connect request parser.

CVSS 4.0HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00157 Published 2026-10-01 Fixed in V5_1.4.6 Build 260709 Rel.27675n, V1_1.9.4 Build 260813 Rel.79754n CWE-476

Vulnerabilities

Filters

Unauthenticated Remote Code Execution via MacTool Command Injection in TP-Link Tapo C120 & C200

Missing authentication in TP-Link Tapo C200 v5

Unauthenticated Onboarding Scan Information Disclosure in TP-Link Tapo C120 & C200

Unauthenticated Onboarding Connect NULL Pointer Dereference Denial of Service Vulnerability in TP-Link Tapo C120 & C200