CVE-2026-102369High 8.7Unauthenticated Remote Code Execution via MacTool Command Injection in TP-Link Tapo C120 & C2000.3%
CVE-2026-78578High 7.1Unauthenticated do Method Onboarding Connect Allows Wi‑Fi Reconfiguration Denial of Service Vulnerability in TP-Link Tapo C120 & C2000.3%
CVE-2026-78577Medium 5.3Unauthenticated Onboarding Scan Information Disclosure in TP-Link Tapo C120 & C2000.2%
CVE-2026-9032High 7.1Unauthenticated Onboarding Connect NULL Pointer Dereference Denial of Service Vulnerability in TP-Link Tapo C120 & C2000.2%
CVE-2026-15316High 7.1Denial-of-Service via Oversized Encrypted Credential Input in TP-Link Tapo C2000.3%
CVE-2026-15315High 8.7Unauthenticated Administrative Authentication Bypass via device_confirm Replay in TP-Link Tapo C120 and C2000.5%
CVE-2026-1871High 7.1Authenticated Stack-based Buffer Overflow in RTSP Authentication of Tapo C2000.3%