Vulnerability Description
On TP-Link Tapo C260 v1 and D235 v1, a guest‑level authenticated user can bypass intended access restrictions by sending crafted requests to a synchronization endpoint. This allows modification of protected device settings despite limited privileges. An attacker may change sensitive configuration parameters without authorization, resulting in unauthorized device state manipulation but not full code execution.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Tp-Link | Tapo C260 Firmware | < 1.1.9 |
| Tp-Link | Tapo C260 | 1 |
Related Weaknesses (CWE)
References
- https://www.tp-link.com/en/support/download/tapo-c260/v1/Product
- https://www.tp-link.com/en/support/download/tapo-d235/
- https://www.tp-link.com/us/support/download/tapo-c260/v1/Product
- https://www.tp-link.com/us/support/faq/4960/Vendor Advisory
FAQ
What is CVE-2026-0653?
CVE-2026-0653 is a vulnerability with a CVSS score of 6.5 (MEDIUM). On TP-Link Tapo C260 v1 and D235 v1, a guest‑level authenticated user can bypass intended access restrictions by sending crafted requests to a synchronization endpoint. This allows modification of pro...
How severe is CVE-2026-0653?
CVE-2026-0653 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-0653?
Check the references section above for vendor advisories and patch information. Affected products include: Tp-Link Tapo C260 Firmware, Tp-Link Tapo C260.