{"id":"CVE-2026-15315","aliases":[],"url":"https://o3.security/vulnerability/CVE-2026-15315","summary":"Tapo C200 v5\ncontains an improper authentication vulnerability within the login\nauthentication verification module. An attacker on the local network can\nexploit weaknesses in challenge…","details":"Tapo C200 v5\ncontains an improper authentication vulnerability within the login\nauthentication verification module. An attacker on the local network can\nexploit weaknesses in challenge parameter validation to bypass normal\nauthentication controls and obtain administrative session tokens. \n\n\n\n\n\n\n\n\n\nSuccessful\nexploitation may allow an attacker to subsequently execute privileged\nmanagement actions, enable unauthorized administrative access and temporary\ndisruption of device services, resulting in a denial-of-service (DoS)\ncondition.","published":"2026-08-18T22:16:49.207","modified":"2026-08-18T22:16:49.207","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[],"fix":null,"references":[{"type":"WEB","url":"https://www.tp-link.com/en/support/download/tapo-c200/v5/"},{"type":"WEB","url":"https://www.tp-link.com/us/support/download/tapo-c200/v5/"},{"type":"WEB","url":"https://www.tp-link.com/us/support/faq/5248/"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2026-08-18T22:16:49.207"}}