Skip to content
OpenAdvisories

Product · TP-Link Systems

Tapo Cloud Service

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.3
    CVE-2026-105822

    Server-Side Request Forgery in Tapo Cloud MQTT Proxy

    The Tapo Cloud MQTT proxy contains a server-side request forgery (SSRF) vulnerability because it accepts a user-controlled host value without sufficient input validation. An attacker may exploit this vulnerability to cause the Tapo Cloud service to send reque…

    TP-Link Systems Tapo Cloud Service Network devices
  • High 8.3
    CVE-2026-105821

    Broken Access Control Leading to Cross-Device Token Issuance in Tapo Cloud MQTT Proxy

    The Tapo Cloud MQTT broker contains a broken access control vulnerability in a proxy topic used by authenticated Tapo devices to request service tokens. The broker does not verify that the device ID supplied in a proxy request belongs to the authenticated dev…

    TP-Link Systems Tapo Cloud Service Network devices