Live › vulnerability › CVE-2026-105814
Go to dashboardA crafted JSON request to the Tapo C210 V3.60 DS JSON API can mix a protected camera operation with public onboarding fields, so the authorization check is skipped. An attacker on the adjacent network can run protected operations, including pan-tilt-zoom control, without a valid session.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Owners of TP-Link Tapo C210 cameras running firmware V3.60 are exposed, as the flaw is in the camera's DS JSON API. Exposure requires an attacker on the same adjacent network segment as the camera. Systems that do not run this model or firmware can skip it.
No product ranges from the sources yet.
V3.60; the sources do not name a fixed version.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
TP-Link Tapo C210 V3.60 contains an authentication bypass vulnerability in the DS JSON API. A crafted JSON request containing both a protected operation and public onboarding-related fields may cause module-level authorization checks to be applied inconsistently, allowing protected camera operations, including pan-tilt-zoom control, to be executed without a valid authenticated session.
Successful exploitation may allow an unauthenticated attacker on the adjacent network to perform protected camera operations, including pan-tilt-zoom (PTZ) control, without a valid authenticated session. This could result in unauthorized manipulation of camera functionality.
This page as .md · .json · in your agent: get_signal("CVE-2026-105814")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.