tapo_c210_v3.6 vulnerabilities
CVEs whose affected-version data names the tapo_c210_v3.6 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-105814Medium· 5.3Order-Dependent Authentication Bypass in the DS JSON API in TP-Link Tapo C210
TP-Link Tapo C210 V3.60 contains an authentication bypass vulnerability in the DS JSON API. A crafted JSON request containing both a protected operation and public onboarding-related fields may cause module-level authorization checks to …
▾ SunlitTP-Link Systems Inc. · Tapo C210 v3.6via CVEORG
CVE-2026-105815High· 7.1Credential Material Exposure Leading to Unauthorized Streamed Media-Session Access in TP-Link Tapo C210
TP-Link Tapo C210 V3.60 may expose shared credential material and cryptographic metadata through unauthenticated DS JSON API requests. The exposed shared credential can be accepted by the Streamd Digest authentication mechanism as an adm…
▾ TwilightTP-Link Systems Inc. · Tapo C210 v3.6via CVEORG