Tapo C210 v3.6 vulnerabilities

2 known vulnerabilities in Tapo C210 v3.6 from TP-Link. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Tapo C210 v3.6: Improper Authentication

  CVE-2026-105815Oct 19, 2026TP-Link

  TP-Link Tapo C210 V3.60 may expose shared credential material and cryptographic metadata through unauthenticated DS JSON API requests. The exposed shared credential can be accepted by the Streamd Digest authentication mechanism as an administrative password, a

• 8.8 High severity

  Tapo C520WS v2.6: Improper Authentication

  CVE-2026-34121Apr 2, 2026TP-Link

  An authentication bypass vulnerability within the HTTP handling of the DS configuration service in TP-Link Tapo C520WS v2.6 and C210 v3 was identified, due to inconsistent parsing and authorization logic in JSON requests during authentication check. An unauthe