Vulnerability Description
Tapo P110 v1 smart Wi-Fi Plug contains an improper boundary validation vulnerability in the handling of authenticated HTTP request bodies due to insufficient input validation before memory copy operations. This may lead to buffer overflow condition, causing the web service process to crash. Successful exploitation may cause the web service process to stop responding or restart, resulting in a denial-of-service condition.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Tp-Link | Tapo P110 Firmware | < 1.1.4 |
| Tp-Link | Tapo P110 | 1.0 |
Related Weaknesses (CWE)
References
- https://www.tp-link.com/en/support/download/tapo-p110/v1/#Firmware-Release-NotesRelease Notes
- https://www.tp-link.com/us/support/download/tapo-p110/v1/#Firmware-Release-NotesRelease Notes
- https://www.tp-link.com/us/support/faq/5220/Vendor Advisory
FAQ
What is CVE-2026-15314?
CVE-2026-15314 is a vulnerability with a CVSS score of 7.5 (HIGH). Tapo P110 v1 smart Wi-Fi Plug contains an improper boundary validation vulnerability in the handling of authenticated HTTP request bodies due to insufficient input validation before memory copy operat...
How severe is CVE-2026-15314?
CVE-2026-15314 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-15314?
Check the references section above for vendor advisories and patch information. Affected products include: Tp-Link Tapo P110 Firmware, Tp-Link Tapo P110.