CVE-2026-15314
Authenticated Denial-of-Service Vulnerability in TP-Link Tapo P110
- State
- Published
- Severity
- 7.1 High
- Published
- Aug 4, 2026
- Updated
- Aug 5, 2026
- Reserved
- Jul 9, 2026
Description
Tapo P110 v1 smart Wi-Fi Plug contains an improper boundary validation vulnerability in the handling of authenticated HTTP request bodies due to insufficient input validation before memory copy operations. This may lead to buffer overflow condition, causing the web service process to crash.
Successful exploitation may cause the web service process to stop responding or restart, resulting in a denial-of-service condition.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 7.1 High | CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N | TPLink |
Weaknesses
- CWE-120 Buffer Copy without Checking Size of Input
Affected Products
| Product | Versions |
|---|---|
P110 v1TP-Link Systems Inc. |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.