CVE-2026-15316

Denial-of-Service via Oversized Encrypted Credential Input in TP-Link Tapo C200

Published: Aug 18, 2026Updated: Sep 4, 2026 Sources: CVE List NVDCWE-20

6.5MEDIUM

Description

An improper input validation vulnerability in the configuration service for processing encrypted credential data has been identified in Tapo C200 v5. An attacker can send oversized crypted ciphertext values that may trigger exception handling failures, due to insufficient validation, causing the affected device to crash or restart. Successful exploitation may temporarily disrupt HTTPS management and monitoring functionality, resulting in a denial-of-service (DoS) condition until the service recovers.

In plain language

AI Act now

Tapo C200 v5 cameras running firmware earlier than 1.4.6 can be forced to restart by someone on your local network, disrupting camera monitoring and management.

Executive summary

Unauthenticated adjacent-network denial of service in the Tapo C200 v5 configuration service: oversized encrypted credential input triggers exception-handling failures and restarts the device.

If affected, business impact

Camera monitoring interruptionManagement access outageRepeated device restartsSecurity coverage gaps

What to do now

Check whether you use a Tapo C200 v5 and record its installed firmware version in the Tapo app or camera management page.
Update affected cameras to firmware 1.4.6; for the v5 release, install V5_1.4.6 Build 260709 Rel.27675n.
Until updated, keep the camera configuration service accessible only from trusted local network devices.
After updating, confirm the camera stays online and HTTPS management access works normally.

Patch / advisory Usually a quick update

What is it

This issue lets a nearby network attacker send an abnormally large piece of setup information that makes the camera restart. It is like repeatedly tripping a circuit breaker: the camera is not taken over, but it can be temporarily unavailable when you need it.

Who is affected

This matters to you if you run a TP-Link Tapo C200 v5 camera. It is a risk only when an attacker is on the same local network and can reach the camera’s configuration service port.

How urgent is it

An attacker on the local network can deliberately crash the camera, creating immediate gaps in monitoring and management access. Treat this as urgent and install the available update promptly, especially on networks shared with guests, contractors, or untrusted devices.

What to do — in detail

Confirm the device is a Tapo C200 v5, identify its current firmware version, and determine whether its configuration service can be reached by untrusted devices on the local network. Upgrade to firmware 1.4.6; the v5-specific fixed release is V5_1.4.6 Build 260709 Rel.27675n. Follow TP-Link’s firmware update instructions for the device, then verify that the camera remains online and its HTTPS management interface is available after the upgrade.

If patching must be delayed, isolate the camera on a trusted network segment and restrict access to its configuration service port to approved administration devices. There is no CISA KEV due date because this CVE is not listed in the CISA Known Exploited Vulnerabilities catalog. Monitor for unexpected camera restarts, loss of HTTPS management access, and repeated availability interruptions.

Technical context

CVE-2026-15316 is a CVSS 6.5 Medium vulnerability (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), classified as CWE-20 improper input validation. An adjacent-network attacker can send oversized encrypted credential data to the configuration service, causing exception-handling failures and a crash or restart. No public exploit code, confirmed in-the-wild exploitation, or CISA KEV listing is reported. EPSS is 0.2% (14th percentile) with a flat trend; this is a prediction, not evidence of exploitation. Press attention is rising due to a roundup, not a confirmed incident.

This is a general assessment based on public vulnerability data. It does not account for your specific infrastructure — when in doubt, consult a security specialist.

CVSS Vector Breakdown

Exploitability

AV:AAttack Vector

Adjacent

AC:LAttack Complexity

Low

PR:NPrivileges Required

None

UI:NUser Interaction

None

Scope

S:UScope

Unchanged

Impact

C:NConfidentiality

None

I:NIntegrity

None

A:HAvailability

High

Open in CVSS calculator →

Weaknesses

CWE-20

Affected Products

TP-Link Systems Inc.

commercial·CNaka tp-link

Tapo C200 v5

Networking Infrastructure

tp-link

commercial·TWaka tp link

tapo c200 firmware

Networking Infrastructure

Exploitability

Official Patch Available

Attack Graph

Products CVE Techniques Tactics

Click technique nodes for MITRE ATT&CK details · drag to pan · Ctrl/⌘ + scroll to zoom, or go fullscreen.

MITRE ATT&CK

1 technique

Initial Access

View detailed technique mapping

References

https://www.tp-link.com/us/support/download/tapo-c200/v5/

tp-link.com

https://www.tp-link.com/en/support/download/tapo-c200/v5/

tp-link.com

https://www.tp-link.com/us/support/faq/5248/

tp-link.com

News mentions

Unlock Complete Vulnerability Intelligence

Get the full picture for CVE-2026-15316 and every CVE in our database. Create a free account — no credit card required.

Create Free Account

Plain-language analysis

Impact assessment and exploitation scenario in plain English

Attack graph visualization

Interactive attack path and kill chain mapping

Exploit details & PoC links

ExploitDB, Metasploit, GitHub PoCs with direct links

Nuclei scanner templates

Ready-to-use vulnerability scanner templates

Full remediation guide

Patch instructions, workarounds, and compliance impact

Interactive AI chat

Ask questions about this vulnerability in natural language

Related vulnerabilities

Semantically similar CVEs and attack patterns

REST API & MCP access

Integrate vulnerability data into your workflows