ReviewHigh

CVE-2026-15314

TP-Link Systems Inc. P110 v1, tapo p110 firmware, tapo p110

Tapo P110 v1 smart Wi-Fi Plug contains an improper boundary validation vulnerability in the handling of authenticated HTTP request bodies due to insufficient input validation before memory copy operations. This may lead to buffer overflow condition, causing the web service process to crash. Successful exploitation may cause the web service process to stop responding or restart, resulting in a denial-of-service condition.

CVSS: 7.1
EPSS: 0.50%
CISA KEV: Not listed
Published: 2026.08.05

PRIORITY ASSESSMENT

Review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability0.50%

Technical severityCVSS 7.1

Vulnerability overview

Affected product and versions

Product: TP-Link Systems Inc. P110 v1, tapo p110 firmware, tapo p110
Affected versions: < V1_1.1.4 Build 260709, < 1.1.4
Fixed versions: Verify the fixed release separately for each affected product line

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that TP-Link Systems Inc. P110 v1, tapo p110 firmware, tapo p110 and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CWE: CWE-120