From PCMAG · Michael Kan · · 1m 20s
TP-Link Camera Has Critical Security Flaw
Researchers found vulnerabilities in the Tapo C200 camera, including one that could let attackers take full control.
In brief
Researchers found vulnerabilities in the Tapo C200 camera, including one that could let attackers take full control. Update your TP-Link Tapo C200 or C120 camera firmware immediately through the Tapo app to fix critical security vulnerabilities. Originally reported by PCMAG.
Critical flaw found in camera
Security researchers at OPSWAT discovered a critical vulnerability in TP-Link's Tapo C200 indoor home surveillance camera.
Attackers could take full control
The flaw could allow an attacker to fully compromise the camera and use it as a foothold within the network. TP-Link is still working on a patch.
“allow an attacker to fully compromise the camera and use the compromised device as a foothold within the network”
Two other flaws discovered
Researchers found two additional vulnerabilities in the camera's firmware, one of which could be used for spying.
Spying flaw bypasses password
CVE-2026-15315 lets attackers obtain a valid admin session without the password, but requires local network access first.
“obtain a valid admin session without the password”
Second flaw crashes the camera
CVE-2026-15316 can knock the camera offline by sending oversized encrypted values that cause it to crash or restart.
Patches released last month
TP-Link patched the two flaws with new firmware for the Tapo C200 and C120 cameras. Users can update through the Tapo mobile app.
Company urges immediate updates
TP-Link strongly encourages all customers to ensure their devices are running the latest firmware version available through the app.
“We strongly encourage all customers to ensure their devices are running the latest firmware version”
The bottom line
Update your TP-Link Tapo C200 or C120 camera firmware immediately through the Tapo app to fix critical security vulnerabilities.
