Login Request a demo
TA
Product
Tapo
by Tp-link · last CVE Feb 13, 2026
8
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 0High 4Medium 4Low 0
Severity
All severities8Critical0High4Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Tapo to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-9293
8.1
0%
Feb 13
Insufficient Certificate Validation in Multiple Mobile Applications Allows Man in the Middle Interception
Affected: before 3.14.111
CVE-2025-9292
7.5
0%
Feb 13
Permissive Web Security Policy Allows Cross-Origin Access Control Bypass on Omada Cloud Controllers
Affected: before 3.14.111
CVE-2023-27098
7.5
0%
Jan 9
TP-Link Tapo APK up to v2.12.703 uses hardcoded credentials for access to the login panel
Affected: before 2.11.44
CVE-2023-38907
7.5
1%
Sep 25
An issue in TPLink Smart Bulb Tapo series L530 before 1.2.4, L510E before 1.1.0, L630 before 1.0.4, P100 before 1.5.0, and Tapo Application 2.8.14 allows a remote attacker to…
Affected: 2.8.14
Showing 4