Skip to content
OpenAdvisories
High · 7.1 CVE-2026-15314 EUVD-2026-52796GHSA-9xv7-g9xq-gqj2

Authenticated Denial-of-Service Vulnerability in TP-Link Tapo P110

Published Aug 4, 2026 · Updated Aug 5, 2026 · Assigned by TPLink

Description

Tapo P110 v1
smart Wi-Fi Plug contains an improper boundary validation vulnerability in the
handling of authenticated HTTP request bodies due to insufficient input
validation before memory copy operations. This may lead to buffer overflow condition,
causing the web service process to crash.

Successful exploitation
may cause the web service process to stop responding or restart, resulting in a
denial-of-service condition.

Affected products

VendorProductAffectedFixed
TP-Link Systems P110 v1 < V1_1.1.4 Build 260709 V1_1.1.4 Build 260709

References