TP‑Link Tapo Cameras Hit by Two Zero‑Day Flaws

TP-Link Tapo cameras, widely used in homes and small businesses, have been exposed to serious vulnerabilities. Researchers at OPSWAT discovered two zero-day flaws allowing attackers on the same network to bypass authentication or disrupt camera services. The vulnerabilities, identified as CVE-2026-15315 and CVE-2026-15316, were resolved with a firmware update released in August 2026. The first flaw affected the cameras’ HTTPS management interface, enabling unauthorized access, while the second flaw allowed a denial-of-service attack during Wi-Fi onboarding. OPSWAT notified TP-Link in April, and the company confirmed the security gaps in July before releasing a patch. Users should promptly update their Tapo C200 cameras to the latest firmware. It’s advisable for businesses to restrict management interfaces to secure networks and segment IoT devices for added protection. To read more about these vulnerabilities and their implications, access the full report from Cyber Security News using the following link:

TP-Link Cameras 0-Day Vulnerabilities Allow Attackers to Spy on Users