---
cve: "CVE-2026-15315"
severity: "HIGH"
cvss: 8.7
epss: "24%"
vendor: "TP-Link Systems Inc."
kev: false
exploited: false
published: "2026-08-18 22:16:49"
tags: [cve, security, high]
source: tsecurity.de CVE-Dossier
exported: "2026-09-06T04:29:26+02:00"
---

# CVE-2026-15315

> 8.7 HIGH

## Beschreibung

Tapo C200 v5
contains an improper authentication vulnerability within the login
authentication verification module. An attacker on the local network can
exploit weaknesses in challenge parameter validation to bypass normal
authentication controls and obtain administrative session tokens. 









Successful
exploitation may allow an attacker to subsequently execute privileged
management actions, enable unauthorized administrative access and temporary
disruption of device services, resulting in a denial-of-service (DoS)
condition.

## CVSS-Vektor

```
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Benachbart | warn |
| AC Komplexität | Gering | bad |
| PR Privilegien | Keine | bad |
| UI Interaktion | Keine | bad |

## Referenzen

- <https://www.tp-link.com/us/support/download/tapo-c200/v5/>
- <https://www.tp-link.com/en/support/download/tapo-c200/v5/>
- <https://www.tp-link.com/us/support/faq/5248/>
- <https://www.tp-link.com/en/support/download/tapo-c120/v1.26/#Firmware-Release-Notes>
- <https://www.tp-link.com/us/support/download/tapo-c120/v1.26/#Firmware-Release-Notes>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2026-15315) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_