CVE-2026-15315: Unauthenticated Administrative Authentication Bypass via device_confirm Replay in TP-Link Tapo C200
Tapo C200 v5 contains an improper authentication vulnerability within the login authentication verification module. An attacker on the local network can exploit weaknesses in challenge parameter validation to bypass normal authentication controls and obtain administrative session tokens.
Successful exploitation may allow an attacker to subsequently execute privileged management actions, enable unauthorized administrative access and temporary disruption of device services, resulting in a denial-of-service (DoS) condition.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
Devices running the Tapo C200 v5 are exposed when an attacker can access the same local network. The issue does not require prior authentication.
What access does an attacker need?
The attacker needs local-network access and can exploit weaknesses in challenge-parameter validation to obtain administrative session tokens. The available information does not state that Internet exposure is required.
What can an attacker do after exploitation?
Successful exploitation can grant administrative-session access, allowing privileged management actions, unauthorized administrative access, and temporary service disruption that can cause denial of service.