CVE-2026-15314

Tapo P110 v1 smart Wi-Fi Plug contains an improper boundary validation vulnerability in the handling of authenticated HTTP request bodies due to insufficient input validation before memory copy operations. This may lead to buffer overflow condition, causing the web service process to crash. Successful exploitation may cause the web service process to stop responding or restart, resulting in a denial-of-service condition.

CVSS 4.0

7.1CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.8% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-25)

CWE

CWE-120

Published

2026-08-04

Modified

2026-10-24

Record from

the NVD, synced 2026-10-24

Affected

• tp-link:tapo_p110_firmware

References

• https://www.tp-link.com/en/support/download/tapo-p110/v1/#Firmware-Release-Notes
• https://www.tp-link.com/us/support/download/tapo-p110/v1/#Firmware-Release-Notes
• https://www.tp-link.com/us/support/faq/5220/

Check your stackJSON