Tapo c200 firmware

This hub aggregates every CVE we track for Tapo c200 firmware, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 8 most recently published vulnerabilities affecting Tapo c200 firmware.

• CVE-2026-1871Authenticated Stack-based Buffer Overflow in RTSP Authentication of Tapo C2006.5Jun 2, 2026
• CVE-2025-14300Unauthenticated Access to connectAP API Endpoint on Tapo C100 and C2008.1Dec 20, 2025
• CVE-2025-14299Improper Content-Length Validation in HTTPS Requests on Tapo C2006.5Dec 20, 2025
• CVE-2025-8065Remote Code Execution via Stack-based Buffer Overflow in ONVIF SOAP Parser in TP-Link Tapo C200 and C520WS6.5Dec 20, 2025
• CVE-2023-49515Insecure Permissiosn vulnerability in TP Link TC70 and C200 WIFI Camera v.3 firmware v.1.3.4 and fixed in v.1.3.11 allows a physically proximate attacker to obtain sensitive information via a conne...4.6Jan 17, 2024
• CVE-2023-27126The AES Key-IV pair used by the TP-Link TAPO C200 camera V3 (EU) on firmware version 1.1.22 Build 220725 is reused across all cameras. An attacker with physical access to a camera is able to extrac...4.6Jun 6, 2023
• CVE-2021-4045TP-LINK Tapo C200 remote code execution vulnerability9.8Mar 7, 2022
• CVE-2020-11445TP-Link cloud cameras through 2020-02-09 allow remote attackers to bypass authentication and obtain sensitive information via vectors involving a Wi-Fi session with GPS enabled, aka CNVD-2020-04855.5.3Apr 1, 2020