47
42
57
60
42
Zero-Day Flaw in TP-Link Cameras Enables Eavesdroppingnew
OPSWAT disclosed two zero-days in TP-Link Tapo C200 cameras: CVE-2026-15315 authentication replay bypass enabling surveillance and CVE-2026-15316 denial-of-service, both patched in firmware.
OPSWAT found two zero-days in the TP-Link Tapo C200 camera, widely used for baby/pet monitoring and SOHO security: CVE-2026-15315, an authentication bypass via replay granting administrative access without the password, and CVE-2026-15316, an unauthenticated denial-of-service that crashes the camera's HTTPS service via oversized encrypted credentials. Both were fixed in firmware version V5_1.4.6 released August 18. A third, still-unpatched zero-day rated critical could allow full camera compromise for use as a network foothold; details await an available fix.
52
42
47
57
CISA adds TP-Link, Apache, and Oracle bugs to its Known Exploited Vulnerabilities catalog
60
60
47
57
42
47
Alert: Active Exploitation of TP-Link, Apache, and Oracle Vulnerabilities Detected
60
60
47
42
42
47
47
47
47
42
42
47
42
42
47
60
42
42
60
60
60
⚡ Weekly Recap: Instagram Account Hacks, Android Zero
60
42
60
42