Tapo (Tp-link) - vulnerabilities (CVEs)

8 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2026-02-13. Vendor: Tp-link.

CVEs of Tapo

• CVE-2025-9293 - CVSS 8.1 (high), 2026-02-13: A vulnerability in the certificate validation logic may allow applications to accept untrusted or improperly validated server identities during TLS…
• CVE-2025-9292 - CVSS 7.5 (high), 2026-02-13: A permissive web security configuration may allow cross-origin restrictions enforced by modern browsers to be bypassed under specific circumstances.…
• CVE-2023-27098 - CVSS 7.5 (high), 2024-01-09: TP-Link Tapo APK up to v2.12.703 uses hardcoded credentials for access to the login panel.
• CVE-2023-34829 - CVSS 6.5 (medium), 2023-12-28: Incorrect access control in TP-Link Tapo before v3.1.315 allows attackers to access user credentials in plaintext.
• CVE-2023-38907 - CVSS 7.5 (high), 2023-09-25: An issue in TPLink Smart Bulb Tapo series L530 before 1.2.4, L510E before 1.1.0, L630 before 1.0.4, P100 before 1.5.0, and Tapo Application 2.8.14 allows a…
• CVE-2023-38909 - CVSS 6.5 (medium), 2023-08-22: An issue in TPLink Smart Bulb Tapo series L530 before 1.2.4, L510E before 1.1.0, L630 before 1.0.4, P100 before 1.5.0, and Tapo Application 2.8.14 allows a…
• CVE-2023-38908 - CVSS 6.5 (medium), 2023-08-22: An issue in TPLink Smart Bulb Tapo series L530 before 1.2.4, L510E before 1.1.0, L630 before 1.0.4, P100 before 1.5.0, and Tapo Application 2.8.14 allows a…
• CVE-2023-38906 - CVSS 6.5 (medium), 2023-08-22: An issue in TPLink Smart Bulb Tapo series L530 1.1.9, L510E 1.0.8, L630 1.0.3, P100 1.4.9, Smart Camera Tapo series C200 1.1.18, and Tapo Application 2.8.14…