CVE-2026-15316Patch(tp-link / tapo_c200)

LOWCVSS 6.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch tp-link tapo_c200 systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

An improper input validation vulnerability in the configuration service for processing encrypted credential data has been identified in Tapo C200 v5. An attacker can send oversized crypted ciphertext values that may trigger exception handling failures, due to insufficient validation, causing the affected device to crash or restart. Successful exploitation may temporarily disrupt HTTPS management and monitoring functionality, resulting in a denial-of-service (DoS) condition until the service recovers.

tp-link CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://www.tp-link.com/us/support/faq/5248/

Other references

Weakness type (CWE)

CWE-20

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

tapo_c200
tapo_c200_firmware

Threat summary

Patch or workaround signal is available
5 mentions across 4 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 4 signals
Technical details provided in 2 signals
Disclosure: 1 classified signal
Peaked 2d ago at 2 mentions (2026-09-17); latest day: 1
5 total mentions across 4 days

Affected systems

Vendors

tp-link

Products

tapo_c200tapo_c200_firmware

1 version affected across 2 products

Deep dive

Activity timeline5 mentions / 4d

Signal classification2 categories

Patch

480.0%

Disclosure

120.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-09-16	1	Patch1
2026-09-17	2	Disclosure1Patch1
2026-09-19	1	Patch1
2026-09-28	1	Patch1

Full discourse5 posts

elhacker.NET@elhackernet45d
Disclosure
Vulnerabilidades 0-day en cámaras TP-Link permiten espiar usuarios Se han detectado dos vulnerabilidades de día cero (CVE-2026-15315 y CVE-2026-15316) en las cámaras inteligentes TP-Link Tapo C200 https://blog.elhacker.net/2026/09/vulnerabilidades-0-day-en-camaras-tp.html
Post summary
The tweet announces the discovery of two zero-day vulnerabilities (CVE-2026-15315 and CVE-2026-15316) in TP-Link Tapo C200 cameras that enable user surveillance, directing readers to a blog post for further information.
16721748015.4K
142.5K followersView on X
Sekurak@Sekurak34d
Patch
🚨 Popularne kamery TP–Link Tapo C200 z poważnymi błędami bezpieczeństwa 🛠️ Badacze z OPSWAT wykryli 3 podatności, z czego 2 z nich otrzymały identyfikatory CVE-2026-15315 i CVE-2026-15316. Ostatnia jest w trakcie odpowiedzialnego ujawniania (rozmowy z przedstawicielami TP–Link). 💻 Wykryte błędy umożliwiają zdobycie dostępu do panelu administracyjnego bez znajomości hasła oraz przeprowadzenie ataków typu DoS. 🛑 Jest jeden warunek, atakujący musi być w tej samej sieci co kamery. 🛡️ Producent wydał łatkę bezpieczeństwa. Zalecamy aktualizację urządzeń do wersji V5_1.4.6 lub nowszej. 👉 Szczegóły: https://sekurak.pl/powazne-podatnosci-w-popularnych-kamerach-tp-link-tapo-c200-z-poziomu-sieci-lokalnej-mozna-bylo-zdobyc-uprawnienia-administratora-lub-przeprowadzic-dos/
Post summary
The text reports on serious vulnerabilities in TP-Link Tapo C200 cameras, with CVEs assigned, and emphasizes that a security patch is available, recommending an update to version V5_1.4.6 or newer.
3303643.7K
45.2K followersView on X
Rıdvan Yağlı@ridvanyagli46d
Patch
🔴 TP-Link Tapo C200 model güvenlik kamerası ürününde iki güvenlik açığı tespit edildi! CVE-2026-15315: Aynı ağdaki kimlik doğrulanmamış saldırgan, authentication mekanizmasını aşarak yönetici oturumu elde edebiliyor. Bu durum kamera görüntülerine ve yönetim işlevlerine erişim riski oluşturuyor. Erişim sonrası saldırgan sizi izleyebiliyor. CVE-2026-15316: Kimlik doğrulama gerektirmeyen saldırgan, özel hazırlanmış veriler göndererek kameranın HTTPS servisini çökertebiliyor (DoS). Tapo C200 V5 için açıklar V5_1.4.6 Build 260709 sürümünde düzeltildi. Kameranızı güncelleyin.
Post summary
Tweet discloses two TP-Link Tapo C200 vulnerabilities (CVE-2026-15315 auth bypass, CVE-2026-15316 DoS) and directs users to upgrade to firmware V5_1.4.6 Build 260709, making Patch the primary classification.
2301321.4K
2.5K followersView on X
ΤechΜaniacs@techmaniacsgr43d
Patch
TP-Link Tapo: Κενό ασφαλείας, επιτρέπει τον οποιοδήποτε να δει εικόνα καμερών [και στην Ελλάδα] Εντοπίστηκαν σοβαρές ευπάθειες ασφαλείας (CVE-2026-15315, CVE-2026-15316) στις κάμερες TP-Link Tapo C200. Κάντε ενημέρωση https://techmaniacs.gr/tp-link-tapo-c200-efpatheia-asfaleias
Post summary
The text reports CVE-2026-15315 and CVE-2026-15316 affecting TP-Link Tapo C200 cameras and explicitly urges users to update, linking to a Greek tech blog for remediation details.
00000147
3.8K followersView on X
The Daily Tech Feed@dailytechonx46d
Patch
Urgent for anyone running TP-Link Tapo C200 cameras: two zero-day vulnerabilities—an auth bypass (CVE-2026-15315) and DoS flaw (CVE-2026-15316)—were patched in firmware V5_1.4.6 on August 18, 2026. Attackers sharing your network could access your camera’s admin functions or crash its service. Tighten your Wi-Fi security and isolate IoT devices until you’ve updated—all things that matter for privacy & security. #Security #IoT #TPLink #Vulnerability #TechNews #Cybersecurity https://thedailytechfeed.com/tp-link-tapo-c200-cameras-had-critical-0-day-flaws-allowing-remote-control/
Post summary
The post announces two TP-Link Tapo C200 camera vulnerabilities and emphasizes that they were patched in firmware V5_1.4.6. It recommends updating devices and using network isolation/Wi-Fi security as interim mitigations, but does not mention PoC code, exploit tools, or active exploitation.
0000088
737 followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
HW	tp-link	tapo_c200	5.0	-	-
OS	tp-link	tapo_c200_firmware	-	-	-

Explore more

Back to dashboard tp-link CVEs tapo_c200 vulnerabilities

What researchers are saying

CVE-2026-15316

Sekurak[verified]@SekurakPatch

The text reports on serious vulnerabilities in TP-Link Tapo C200 cameras, with CVEs assigned, and emphasizes that a security patch is available, recommending an update to version V5_1.4.6 or newer.

Rıdvan Yağlı[verified]@ridvanyagliPatch

Tweet discloses two TP-Link Tapo C200 vulnerabilities (CVE-2026-15315 auth bypass, CVE-2026-15316 DoS) and directs users to upgrade to firmware V5_1.4.6 Build 260709, making Patch the primary classification.

The Daily Tech Feed[verified]@dailytechonxPatch

The post announces two TP-Link Tapo C200 camera vulnerabilities and emphasizes that they were patched in firmware V5_1.4.6. It recommends updating devices and using network isolation/Wi-Fi security as interim mitigations, but does not mention PoC code, exploit tools, or active exploitation.

elhacker.NET@elhackernetDisclosure

The tweet announces the discovery of two zero-day vulnerabilities (CVE-2026-15315 and CVE-2026-15316) in TP-Link Tapo C200 cameras that enable user surveillance, directing readers to a blog post for further information.

ΤechΜaniacs@techmaniacsgrPatch

The text reports CVE-2026-15315 and CVE-2026-15316 affecting TP-Link Tapo C200 cameras and explicitly urges users to update, linking to a Greek tech blog for remediation details.