How many TP-Link tapo c200 firmware CVEs are in CISA KEV?

None of TP-Link tapo c200 firmware's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of TP-Link tapo c200 firmware are affected?

24 distinct TP-Link tapo c200 firmware versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in TP-Link tapo c200 firmware CVEs?

TP-Link tapo c200 firmware's CVEs most often map to these CWE weakness types: CWE-121 (Stack-based Buffer Overflow), CWE-770 (Allocation of Resources Without Limits or Throttling), CWE-306 (Missing Authentication for Critical Function), CWE-522 (Insufficiently Protected Credentials).

How many critical TP-Link tapo c200 firmware vulnerabilities are there?

TP-Link tapo c200 firmware has 1 critical and 5 high-severity CVEs.

What is the average severity of TP-Link tapo c200 firmware CVEs?

The average CVSS base score across TP-Link tapo c200 firmware's scored CVEs is 7.0.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

TP-Link

9 CVEs

TP-Link tapo c200 firmware Vulnerabilities

Name: TP-Link tapo c200 firmware vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for tapo c200 firmware by TP-Link.

9

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

3

Public exploits

PoC or exploit code

7.0

Avg CVSS

2020–2026

Last updated June 24, 2026

Overview

TP-Link tapo c200 firmware has 9 published CVE records since 2020, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 3 have a known public exploit. The average CVSS base score across scored CVEs is 7.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting TP-Link tapo c200 firmware, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include tapo c200.

Severity and exploitation

How the CVSS severity of TP-Link tapo c200 firmware's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High5

Medium3

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of TP-Link tapo c200 firmware's CVEs are currently listed in CISA's KEV catalog.

Public exploits

3

3 of TP-Link tapo c200 firmware's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every TP-Link tapo c200 firmware version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

1.3.3 <= v <= 1.3.35 CVEs
1.3.4 <= v <= 1.3.45 CVEs
1.3.5 <= v <= 1.3.55 CVEs
1.3.9 <= v <= 1.3.95 CVEs
1.3.11 <= v <= 1.3.114 CVEs
1.3.13 <= v <= 1.3.134 CVEs
1.3.14 <= v <= 1.3.144 CVEs
1.3.15 <= v <= 1.3.154 CVEs
1.3.7 <= v <= 1.3.74 CVEs
1.4.1 <= v <= 1.4.14 CVEs
1.4.2 <= v <= 1.4.24 CVEs
1.4.4 <= v <= 1.4.43 CVEs
<= 1.1.151 CVE
<= 2020-02-091 CVE
1.0.12 <= v <= 1.0.121 CVE
1.0.13 <= v <= 1.0.131 CVE
1.0.17 <= v <= 1.0.171 CVE
1.0.5 <= v <= 1.0.51 CVE
1.1.22 <= v <= 1.1.221 CVE
1.1.4 <= v <= 1.1.41 CVE
1.1.8 <= v <= 1.1.81 CVE
1.2.2 <= v <= 1.2.21 CVE
1.2.3 <= v <= 1.2.31 CVE
1.3.1 <= v <= 1.3.11 CVE

Find a version

9 CVEs

Sort

Denial-of-Service Vulnerability via Malformed IPv4 Fragmentation Handling in TP-Link Tapo C200
CVE-2026-12760
Patch
CWE-770
High · CVSS 7.1
EPSS 0.2% (13th pct)2026-06-24
Authenticated Stack-based Buffer Overflow in RTSP Authentication of Tapo C200
CVE-2026-1871
Patch
CWE-121
High · CVSS 7.1
EPSS 0.3% (23th pct)2026-06-02
Unauthenticated Access to connectAP API Endpoint on Tapo C100 and C200
CVE-2025-14300
Patch
CWE-306
High · CVSS 8.7
EPSS 0.3% (24th pct)2025-12-20
Improper Content-Length Validation in HTTPS Requests on Tapo C200
CVE-2025-14299
Patch
CWE-770
High · CVSS 7.1
EPSS 0.2% (15th pct)2025-12-20
Remote Code Execution via Stack-based Buffer Overflow in ONVIF SOAP Parser in TP-Link Tapo C200 and C520WS
CVE-2025-8065
Patch
CWE-121
High · CVSS 8.7
EPSS 0.5% (40th pct)2025-12-20
Medium vulnerability · 2024-01-17
CVE-2023-49515
Public exploit
CWE-922
Medium · CVSS 4.6
EPSS 0.4% (29th pct)2024-01-17
Medium vulnerability · 2023-06-06
CVE-2023-27126
Public exploit
CWE-522
Medium · CVSS 4.6
EPSS 0.4% (28th pct)2023-06-06
Critical vulnerability · 2022-03-07
CVE-2021-4045
Public exploit
Patch
CWE-77
Critical · CVSS 9.8
EPSS 72.4% (99th pct)2022-03-07
Medium vulnerability · 2020-04-01
CVE-2020-11445
Medium · CVSS 5.3
EPSS 1.8% (76th pct)2020-04-01

Common weakness types

The CWE weakness categories most often found in TP-Link tapo c200 firmware CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many TP-Link tapo c200 firmware CVEs were published each year.

2020

1

2022

1

2023

1

2024

1

2025

3

2026

2

Other TP-Link products

Browse vulnerabilities for other products by TP-Link.

tl-wr841n41 CVEs tl-wr886n firmware40 CVEs tl-wr841n firmware39 CVEs tl-wr886n39 CVEs er5120g26 CVEs er5110g25 CVEs er5110g firmware25 CVEs er5120g firmware25 CVEs

All TP-Link vulnerabilities

Frequently asked questions

Common questions about TP-Link tapo c200 firmware vulnerabilities.

How many CVEs does TP-Link tapo c200 firmware have?: TP-Link tapo c200 firmware has 9 published CVE records since 2020.
How many TP-Link tapo c200 firmware CVEs are in CISA KEV?: None of TP-Link tapo c200 firmware's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for TP-Link tapo c200 firmware vulnerabilities?: Yes — 3 of TP-Link tapo c200 firmware's CVEs have a known public exploit.
Which versions of TP-Link tapo c200 firmware are affected?: 24 distinct TP-Link tapo c200 firmware versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in TP-Link tapo c200 firmware CVEs?: TP-Link tapo c200 firmware's CVEs most often map to these CWE weakness types: CWE-121 (Stack-based Buffer Overflow), CWE-770 (Allocation of Resources Without Limits or Throttling), CWE-306 (Missing Authentication for Critical Function), CWE-522 (Insufficiently Protected Credentials).
How many critical TP-Link tapo c200 firmware vulnerabilities are there?: TP-Link tapo c200 firmware has 1 critical and 5 high-severity CVEs.
What is the average severity of TP-Link tapo c200 firmware CVEs?: The average CVSS base score across TP-Link tapo c200 firmware's scored CVEs is 7.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track TP-Link tapo c200 firmware vulnerabilities

Monitor new TP-Link tapo c200 firmware vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing