Tapo C120 V1
- Software type
- Other
- Total vulnerabilities (90 days)
- 4
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/07/2026, Tapo C120 V1 recorded 4 security vulnerabilities in the last 90 days, of which 3 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Tapo C120 V1 and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-9032Unauthenticated Onboarding Connect NULL Pointer Dereference Denial of Service Vulnerability in TP-Link Tapo C120 & C200CVE-2026-78578Unauthenticated do Method Onboarding Connect Allows Wi‑Fi Reconfiguration Denial of Service Vulnerability in TP-Link Tapo C120 & C200CVE-2026-78577Unauthenticated Onboarding Scan Information Disclosure in TP-Link Tapo C120 & C200CVE-2026-102369Unauthenticated Remote Code Execution via MacTool Command Injection in TP-Link Tapo C120 & C200| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-9032Unauthenticated Onboarding Connect NULL Pointer Dereference Denial of Service Vulnerability in TP-Link Tapo C120 & C200 | Exploitation statusNot exploited | FixYes | Published10/01/2026 | SeverityHigh |
CVE-2026-78578Unauthenticated do Method Onboarding Connect Allows Wi‑Fi Reconfiguration Denial of Service Vulnerability in TP-Link Tapo C120 & C200 | Exploitation statusNot exploited | FixYes | Published10/01/2026 | SeverityHigh |
CVE-2026-78577Unauthenticated Onboarding Scan Information Disclosure in TP-Link Tapo C120 & C200 | Exploitation statusNot exploited | FixYes | Published10/01/2026 | SeverityMedium |
CVE-2026-102369Unauthenticated Remote Code Execution via MacTool Command Injection in TP-Link Tapo C120 & C200 | Exploitation statusNot exploited | FixYes | Published10/01/2026 | SeverityHigh |
4 Results | Page 1 of 1