CVE-2026-105814

MediumCVSS 5.3

Published: 19/10/2026(UTC)Updated: 20/10/2026(UTC)Translated: 20/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.23%

13th percentile - higher than 13% of all known CVEs

Summary

Risk Assessment

An unauthenticated attacker on the adjacent network may perform protected camera operations, including PTZ control, without a valid authenticated session. This could result in unauthorized manipulation of camera functionality.

Recommendation

Update the TP-Link Tapo C210 firmware to a version containing the fix. Restrict access to the camera API from adjacent networks.

Other vulnerabilities in TP-Link Tapo C210

CVE-2026-105815High
TP-Link Tapo C210 V3.60 may expose shared credential material and cryptographic metadata through unauthenticated DS JSON API requests. The exposed shared credential can be accepted by the Streamd Digest authentication mechanism as an administrative password, allowing an unauthenticated adjacent-network attacker to establish encrypted media sessions without knowledge of the device account password.

Original NVD description (English source)

TP-Link Tapo C210 V3.60 contains an authentication bypass vulnerability in the DS JSON API. A crafted JSON request containing both a protected operation and public onboarding-related fields may cause module-level authorization checks to be applied inconsistently, allowing protected camera operations, including pan-tilt-zoom control, to be executed without a valid authenticated session. Successful exploitation may allow an unauthenticated attacker on the adjacent network to perform protected camera operations, including pan-tilt-zoom (PTZ) control, without a valid authenticated session. This could result in unauthorized manipulation of camera functionality.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS