Tapo C200 Firmware vulnerabilities

2 known vulnerabilities in Tapo C200 Firmware from TP-Link. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Tapo C200 v5: Improper Authentication

  CVE-2026-15315Aug 18, 2026TP-Link

  Tapo C120 v1 and C200 v5 contain an improper authentication vulnerability within the login authentication verification module. An attacker on the local network can exploit weaknesses in challenge parameter validation to bypass normal authentication controls an

• 8.1 High severity

  Tapo C200: Missing Authentication for Critical Functionality

  CVE-2025-14300Dec 20, 2025TP-Link

  The HTTPS service on Tapo C200 v3, v5, C425 v1.2 and C100 v5 exposes a connectAP interface without proper authentication. An unauthenticated attacker on the same local network segment can exploit this to modify the device’s Wi-Fi configuration, resulting in lo