TP-Link Systems Inc Tapo c325wb v2 vulnerabilities

3 CVEs affecting TP-Link Systems Inc Tapo c325wb v2, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-105674, published 2026-10-08.

More from TP-Link Systems Inc.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-105672, published 2026-10-08. High severity, CVSS 8.7. EPSS: 0.2% chance of exploitation in the next 30 days. TP-Link Tapo C325WB V2 contains an unauthenticated authorization bypass vulnerability in the HTTPS JSON API dispatcher on TCP port 443. An attacker on the adjacent network can append an…
• CVE-2026-105674, published 2026-10-08. High severity, CVSS 8.7. EPSS: 0.2% chance of exploitation in the next 30 days. TP-Link Tapo C325WB V2 generates the pre-shared key used by its local media streaming service with a time-seeded pseudo-random number generator, making the key predictable and recoverable. An…
• CVE-2026-105673, published 2026-10-08. High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days. An unauthenticated denial-of-service vulnerability exists in Tapo C325WB v2 in the RTSP streaming service on TCP port 554 when the Camera Account feature is enabled. A crafted pair of RTSP-over-HTTP…