Answer in brief
CVE-2026-78577 records a Medium severity (CVSS 5.3) vulnerability in Unauthenticated Onboarding Scan Information Disclosure in TP-Link Tapo C120 & C200. The current sources do not mark it as known exploited. The current feed maps TP-Link Systems Inc./Tapo C120 v1 (generic), TP-Link Systems Inc./Tapo C200 v5 (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 5.3. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps TP-Link Systems Inc./Tapo C120 v1 (generic), TP-Link Systems Inc./Tapo C200 v5 (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| TP-Link Systems Inc./Tapo C120 v1generic | >=0 <V1_1.9.4 Build 260813 Rel.79754n | V1_1.9.4 Build 260813 Rel.79754n, V1_1.9.4 |
| TP-Link Systems Inc./Tapo C200 v5generic | >=0 <V5_1.4.6 Build 260709 Rel.27675n | V5_1.4.6 Build 260709 Rel.27675n, V5_1.4.6 |
Published upstream
Oct 1, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 1, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Oct 1, 2026
Tapo C120 v1 and C200 V5 contain a vulnerability in the HTTPS onboarding scan function due to missing authentication. After initial setup, an unauthenticated attacker on the same local network can invoke the scan action and retrieve nearby wireless access-point metadata, including SSIDs, BSSIDs, authentication and encryption modes, and signal-strength information. Successful exploitation may disclose information about the wireless environment surrounding the camera, allowing an attacker to learn elements of the local wireless topology.
Quoted source text, attributed separately from HOL analysis.