What’s Vulnerable › Products

TP-Link Tapo C220 Firmware vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your TP-Link Tapo C220 Firmware version is affected

Latest TP-Link Tapo C220 Firmware vulnerabilities

• CVE-2026-1315 — Unauthenticated Denial of Service via Firmware Update Endpoint on TP-Link Tapo C220 & C520WS (CVSS 7.5)
• CVE-2026-0919 — Unauthenticated Denial of Service via Oversized URL in HTTP Parser on TP-Link Tapo C210, C220 & C520WS (CVSS 7.5)
• CVE-2026-0918 — Null Pointer Dereference in Tapo SmartCam HTTP Service on TP-Link Tapo C220 & C520WS (CVSS 7.5)