[CLSTR]
< Back to situation

[REVISION HISTORY]

TP-Link Tapo security vulnerabilities and product expansion

Updated 2 times since CLSTR started tracking revisions of this situation.

What changed

2026-09-21 11:21 UTC → 2026-09-23 08:07 UTC · added removed

Security researchers at OPSWAT identified several vulnerabilities in TP-Link’s Tapo C200 indoor surveillance cameras. These flaws, including CVE-2026-15315 and CVE-2026-15316, could allow attackers on a local network to bypass authentication, gain administrator privileges, access live video, or crash the device's management service. TP-Link released firmware updates in August to address two of these vulnerabilities and is working to remediate a third undisclosed flaw that could allow a camera to be used as a foothold to target other network devices. Following these security developments, TP-Link expanded its Tapo smart home security portfolio. The company introduced three dual-lens 2K security cameras—the Tapo C246D, C545D, and C245D—which utilize wide-angle and telephoto lenses for synchronized intelligent tracking. These models include AI-driven detection for people, pets, vehicles, and baby crying. TP-Link also expanded its video doorbell lineup. The Tapo Doorbell Pro D260 is a 4K model featuring a 180-degree diagonal field of view, radar detection to reduce false alerts, and local facial recognition to enhance privacy. Additionally, the company introduced the Tapo D130, a compact, hardwired 2K 5MP model featuring a starlight sensor for color night vision and a built-in spotlight. In September 2026, TP-Link expanded the availability of its dual-lens camera lineup in Argentina. The C246D, C545D, and C245D models in this region feature intelligent tracking, where a moving lens follows objects detected by a fixed lens. The outdoor C545D model includes IP66 weather resistance. These devices are compatible with Alexa, Google Assistant, and Samsung SmartThings, offering storage via microSD cards up to 512 GB or the Tapo Care cloud subscription.

Versions

  1. 2026-09-23 08:07 UTC TP-Link Tapo security vulnerabilities and product expansion
  2. 2026-09-21 11:21 UTC TP-Link Tapo security vulnerabilities and product expansion
  3. 2026-09-17 17:03 UTC TP-Link Tapo security vulnerabilities and product expansion

Only revisions since CLSTR began indexing content versions appear here. Select a version to see what changed compared to the one before it.