CVE.RADIO
FREN

CVE-2026-15314

TP-Link Systems Inc. P110 v1VulnerabilityCVSS 7.1

Tapo P110 v1 smart Wi-Fi Plug contains an improper boundary validation vulnerability in the handling of authenticated HTTP request bodies due to insufficient input validation before memory copy operations. This may lead to buffer overflow condition, causing the web service process to crash. Successful exploitation may cause the web service process to stop responding or restart, resulting in a denial-of-service condition.

No public exploitation has been reported so far. No distribution fix is listed yet; apply vendor mitigations and monitor.

Recommended action: Track your distribution's security tracker and apply the fix as soon as it ships.

CVE-2026-15314 TP-Link Systems Inc. P110 v1 Vulnerability

Severity metrics

CVSS 4.0 : 7.1 HIGH

Attack vectorAdjacent network
Attack complexityLow
Attack requirementsNone
Privileges requiredNone
User interactionNone
Confidentiality impactNone
Integrity impactNone
Availability impactHigh
Subsequent confidentialityNone
Subsequent integrityNone
Subsequent availabilityNone

Vector: AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected & fixed versions by distribution

Versions are the native distribution strings (backport-aware): RHEL/Debian/SUSE backport fixes, so compare with the distro version comparator (dpkg / rpm / vercmp), not the upstream version.

No affected package in the tracked watchlist yet (Debian, Ubuntu, Arch, SUSE, Red Hat...). Triage may still be pending.

Sources

Advisory NVD CVE.org

Published 2026-08-04 · source: NVD