CVE-2026-15314CWE-120

CVE-2026-15314

High · published August 4, 2026

CVSS v3.1
7.5
EPSS
1%
Percentile
54.8
In the wild
Unconfirmed
What it is

Tapo P110 v1

smart Wi-Fi Plug contains an improper boundary validation vulnerability in the

handling of authenticated HTTP request bodies due to insufficient input

validation before memory copy operations. This may lead to buffer overflow condition,

causing the web service process to crash.

Successful exploitation

may cause the web service process to stop responding or restart, resulting in a

denial-of-service condition.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00759 · 54.8th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-08-04T21:16Z
Affected products (1)
ProductVersionsFixed in
tp-link/tapo_p110_firmware< 1.1.41.1.4
References (3)
https://www.tp-link.com/en/support/download/tapo-p110/v1/#Firmware-Release-Notes · f23511db-6c3e-4e32-a477-6aa17d310630https://www.tp-link.com/us/support/download/tapo-p110/v1/#Firmware-Release-Notes · f23511db-6c3e-4e32-a477-6aa17d310630https://www.tp-link.com/us/support/faq/5220/ · f23511db-6c3e-4e32-a477-6aa17d310630
EPSS history
Timeline
  • 04 AUG 16:59Z
    Authenticated Denial-of-Service Vulnerability in TP-Link Tapo P110
    cvelistv5