Vulnerabilities
Summary — last 7 days
New vulnerabilities3,517▼ 1,240 vs. last week
Critical / high1,375▼ 1,336 vs. last week
New active exploitation (KEV)13▲ 6 vs. last week
Unscored (no CVSS)692▲ 632 vs. last week
More filters
4 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | High (7.1) | 0.21% | — | Tp-link Tapo C210AI | 10/19/2026 | 10/20/2026 | TP-Link Tapo C210 V3.60 may expose shared credential material and cryptographic metadata through unauthenticated DS JSON API requests. The exposed shared credential can be accepted by the Streamd Digest authentication mechanism as an administrative password, allowing an unauthenticated adjacent-network attacker to… | |
| Deferred | Medium (5.3) | 0.23% | — | Tp-link Tapo C210AI | 10/19/2026 | 10/20/2026 | TP-Link Tapo C210 V3.60 contains an authentication bypass vulnerability in the DS JSON API. A crafted JSON request containing both a protected operation and public onboarding-related fields may cause module-level authorization checks to be applied inconsistently, allowing protected camera operations, including… | |
| Analyzed | High (8) | 0.75% | — | Tp-link Tapo C210 Firmware | 5/3/2024 | 6/17/2026 | TP-Link Tapo C210 ActiveCells Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Tapo C210 IP cameras. Although authentication is required to exploit this vulnerability, the existing… | |
| Analyzed | High (8.8) | 0.62% | — | Tp-link Tapo C210 Firmware | 5/3/2024 | 6/17/2026 | TP-Link Tapo C210 Password Recovery Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of TP-Link Tapo C210 IP cameras. Authentication is not required to exploit this vulnerability. The specific flaw exists within the password… |