CVE-2026-15314: TP-Link Tapo p110 Firmware

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

Tapo P110 v1 smart Wi-Fi Plug contains an improper boundary validation vulnerability in the handling of authenticated HTTP request bodies due to insufficient input validation before memory copy operations. This may lead to buffer overflow condition, causing the web service process to crash. Successful exploitation may cause the web service process to stop responding or restart, resulting in a denial-of-service condition.

Affected products

• TP-Link Tapo p110 Firmware: before 1.1.4 (fixed in 1.1.4)

Published 2026-08-04. Last modified 2026-08-07.