CVE-2026-15314

Tapo P110 v1 smart Wi-Fi Plug contains an improper boundary validation vulnerability in the handling of authenticated HTTP request bodies due to insufficient input validation before memory copy operations. This may lead to buffer overflow condition, causing the web service process to crash. Successful exploitation may cause the web service process to stop responding or restart, resulting in a denial-of-service condition.

Score

CVSS 3.1 7.5 High

Status

Analyzed - f23511db-6c3e-4e32-a477-6aa17d310630

Published

2026-08-04

Last modified

2026-10-24

Weaknesses

CWE-120

Affected products

• Tapo P110 Firmware (Tp-link)
• P110 V1 (Tp-link Systems Inc.)

References

• https://www.tp-link.com/us/support/download/tapo-p110/v1/#Firmware-Release-Notes
• https://www.tp-link.com/en/support/download/tapo-p110/v1/#Firmware-Release-Notes
• https://www.tp-link.com/us/support/faq/5220/