TP-Link Systems Tapo C120

5 known vulnerabilities in TP-Link Systems Tapo C120, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

CVE-2026-9032 CVSS 7.1 high Tapo C120 v1 and C200 v5 contain a NULL pointer dereference in the HTTPS onboarding connect request parser. The interface is reachable…
CVE-2026-78578 CVSS 7.1 high Tapo C120 v1 and C200 v5 do not enforce authentication for do method HTTPS onboarding connect actions after initial setup. An…
CVE-2026-78577 CVSS 5.3 medium Tapo C120 v1 and C200 V5 contain a vulnerability in the HTTPS onboarding scan function due to missing authentication. After initial setup…
CVE-2026-102369 CVSS 8.7 high Tapo C120 v1 and C200 V5 do not adequately protect login challenge data or sanitize attacker-controlled input processed by the MacTool…
CVE-2026-15315 CVSS 8.7 high Tapo C120 v1 and C200 v5 contain an improper authentication vulnerability within the login authentication verification module. An attacker…