What’s Vulnerable › Products

TP-Link Tapo vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your TP-Link Tapo version is affected

Latest TP-Link Tapo vulnerabilities

• CVE-2025-9293 — Insufficient Certificate Validation in Multiple Mobile Applications Allows Man in the Middle Interception (CVSS 8.1)
• CVE-2025-9292 — Permissive Web Security Policy Allows Cross-Origin Access Control Bypass on Omada Cloud Controllers (CVSS 7.5)
• CVE-2023-27098 — (CVSS 7.5)
• CVE-2023-34829 — (CVSS 6.5)
• CVE-2023-38907 — (CVSS 7.5)
• CVE-2023-38909 — (CVSS 6.5)
• CVE-2023-38908 — (CVSS 6.5)
• CVE-2023-38906 — (CVSS 6.5)