Login Request a demo
TA
Product
Tapo
by Tp-link · last CVE Feb 13, 2026
8
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 0High 4Medium 4Low 0
Severity
All severities8Critical0High4Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Tapo to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-9293
8.1
0%
Feb 13
Insufficient Certificate Validation in Multiple Mobile Applications Allows Man in the Middle Interception
Affected: before 3.14.111
CVE-2025-9292
7.5
0%
Feb 13
Permissive Web Security Policy Allows Cross-Origin Access Control Bypass on Omada Cloud Controllers
Affected: before 3.14.111
CVE-2023-27098
7.5
0%
Jan 9
TP-Link Tapo APK up to v2.12.703 uses hardcoded credentials for access to the login panel
Affected: before 2.11.44
CVE-2023-38907
7.5
1%
Sep 25
An issue in TPLink Smart Bulb Tapo series L530 before 1.2.4, L510E before 1.1.0, L630 before 1.0.4, P100 before 1.5.0, and Tapo Application 2.8.14 allows a remote attacker to…
Affected: 2.8.14
CVE-2023-34829
6.5
0%
Dec 28
Incorrect access control in TP-Link Tapo before v3.1.315 allows attackers to access user credentials in plaintext
Affected: before 3.1.315
CVE-2023-38909
6.5
1%
Aug 22
An issue in TPLink Smart Bulb Tapo series L530 before 1.2.4, L510E before 1.1.0, L630 before 1.0.4, P100 before 1.5.0, and Tapo Application 2.8.14 allows a remote attacker to…
Affected: 2.8.14
CVE-2023-38908
6.5
1%
Aug 22
An issue in TPLink Smart Bulb Tapo series L530 before 1.2.4, L510E before 1.1.0, L630 before 1.0.4, P100 before 1.5.0, and Tapo Application 2.8.14 allows a remote attacker to…
Affected: 2.8.14
CVE-2023-38906
6.5
1%
Aug 21
An issue in TPLink Smart Bulb Tapo series L530 1.1.9, L510E 1.0.8, L630 1.0.3, P100 1.4.9, Smart Camera Tapo series C200 1.1.18, and Tapo Application 2.8.14 allows a remote…
Affected: 2.8.14
Showing 8