CVE-2026-105672 Details
Description
TP-Link Tapo C325WB V2 contains an unauthenticated authorization bypass vulnerability in the HTTPS JSON API dispatcher on TCP port 443. An attacker on the adjacent network can append an onboarding-scoped object to a JSON request to bypass session verification and invoke privileged actions without authentication. Successful exploitation may allow an unauthenticated adjacent-network attacker to access live video and audio, modify device settings, and obtain sensitive device information or secrets.
An authorization bypass vulnerability has been identified in the TP-Link Tapo C325WB V2 camera, specifically within the HTTPS JSON API dispatcher on TCP port 443. This vulnerability allows an unauthenticated attacker on the adjacent network to bypass session verification by appending an onboarding-scoped object to a JSON request. Exploitation of this vulnerability could enable access to live video and audio, modification of device settings, and retrieval of sensitive device information or secrets.
Users are advised to update to the latest firmware version, Tapo C325WB V2_1.3.3 Build 260914. Instructions for downloading the update are available on the TP-Link website.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 8, 2026CISA-ADP
Assessed Oct 15, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.tp-link.com/en/support/download/tapo-c325wb/#Firmware-Release-Notes | TPLink | ProductRelease NotesVendor |
| https://www.tp-link.com/us/support/download/tapo-c325wb/#Firmware-Release-Notes | TPLink | ProductRelease NotesVendor |
| https://www.tp-link.com/us/support/faq/5333/ | TPLink | AdvisoryBundleRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-287 | Improper Authentication | TPLink |
Affected Products
| Product | Versions |
|---|---|
| TP-Link Tapo C325WB | V2 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 15, 2026 | CVE Modified | CISA-ADP |
| Oct 8, 2026 | New CVE Received | TPLink |