Tp-link Tapo C220 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Tp-link Tapo C220 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2026-0918 — CVSS 7.5 (high): The Tapo C100 v5, C220 v1 and C520WS v2 cameras’ HTTP service does not safely handle POST requests containing an excessively large…
• CVE-2026-0919 — CVSS 7.5 (high): The HTTP parser of Tapo C210 v3, C220 v1 and C520WS v2 cameras improperly handles requests containing an excessively long URL path. An…
• CVE-2026-1315 — CVSS 7.5 (high): By sending crafted files to the firmware update endpoint of Tapo C220 v1 and C520WS v2, the device terminates core system services before…