CVE-2026-105814
Last modified
CVE-2026-105814 is a medium-severity vulnerability rated 5.3/10 on the CVSS scale. TP-Link Tapo C210 V3.60 contains an authentication bypass vulnerability in the DS JSON API. A crafted JSON request containing both a protected operation and public onboarding-related fields may cause module-level authorization checks to be applied inconsistently, allowing protected camera operations, including pan-tilt-zoom control, to be executed without a valid authenticated session. Successful exploitation may allow an unauthenticated attacker on the adjacent network to perform protected camera operations, including pan-tilt-zoom (PTZ) control, without a valid authenticated session. This could result in unauthorized manipulation of camera functionality.. EPSS estimates a 0.23% chance of exploitation in the next 30 days.
Description
TP-Link Tapo C210 V3.60 contains an authentication bypass vulnerability in the DS JSON API. A crafted JSON request containing both a protected operation and public onboarding-related fields may cause module-level authorization checks to be applied inconsistently, allowing protected camera operations, including pan-tilt-zoom control, to be executed without a valid authenticated session. Successful exploitation may allow an unauthenticated attacker on the adjacent network to perform protected camera operations, including pan-tilt-zoom (PTZ) control, without a valid authenticated session. This could result in unauthorized manipulation of camera functionality.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| TP-Link Systems Inc. | Tapo C210 v3.6 | < V3.6_1.2.7 Build 260818 |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-105814?
How severe is CVE-2026-105814?
How do I fix CVE-2026-105814?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-105808A vulnerability was determined in SourceCodester Simple Stud…3.5
- CVE-2026-105809A vulnerability was identified in SourceCodester Simple Stud…4.3
- CVE-2026-10581A flaw has been found in DedeCMS 5.7.88. Affected by this vu…6.3
- CVE-2026-105810Tapo C320WS V2.0 contains an authenticated stack-based buffe…8.5
- CVE-2026-105811Authorization bypass through a user-controlled key in the op…6.5
- CVE-2026-105812Improper control of code generation in the agent import func…9
- CVE-2026-105815TP-Link Tapo C210 V3.60 may expose shared credential materia…7.1
- CVE-2026-105816Vault and Vault Enterprise did not consistently verify that …8
- CVE-2026-105818Vault's PKI secrets engine ACME server did not restrict cert…5.9
- CVE-2026-10582Hugo's security.http.urls allowlist is the only control on o…7.4
- CVE-2026-105820Vault's ACL policy cache allowed namespace traversal when po…5.4
- CVE-2026-105823Rejected reason: This CVE ID has been rejected as a duplicat…
Are you affected by CVE-2026-105814?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST