Tapo C260 Firmware (Tp-link) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-02-10. Vendor: Tp-link.

CVEs of Tapo C260 Firmware

• CVE-2026-0653 - CVSS 7.2 (high), 2026-02-10: On TP-Link Tapo C260 v1 and D235 v1, a guest‑level authenticated user can bypass intended access restrictions by sending crafted requests to a synchronization…
• CVE-2026-0652 - CVSS 8.8 (high), 2026-02-10: On TP-Link Tapo C260 v1, command injection vulnerability exists due to improper sanitization in certain POST parameters during configuration synchronization.…
• CVE-2026-0651 - CVSS 7.8 (high), 2026-02-10: A path traversal vulnerability was identified TP-Link Tapo C260 v1, D235 v1, C211 v2 and C520WS v2.6 within the HTTP server’s handling of GET requests. The…