HarborGuard / CVE
Back to search
HIGHCVE-2026-0653Published Modified CNA TPLink

CVE-2026-0653: Insecure Access Control on TP-Link Tapo D235 and C260

On TP-Link Tapo C260 v1 and D235 v1, a guest‑level authenticated user can bypass intended access restrictions by sending crafted requests to a synchronization endpoint. This allows modification of protected device settings despite limited privileges. An attacker may change sensitive configuration parameters without authorization, resulting in unauthorized device state manipulation but not full code execution.

Metrics

CVSS v4.0
7.2
Severity
HIGH
Fixed in
1.1.9 Build 251226 Rel.55870n
Affected Products
2

Fix available

1.1.9 Build 251226 Rel.55870n1.2.2 Build 260210 Rel.27165n
Patch commits
Affected packages
  • TP-Link Systems Inc. / Tapo C260 v1
    < 1.1.9 Build 251226 Rel.55870n (from 0)
  • TP-Link Systems Inc. / Tapo D235 v1
    < 1.2.2 Build 260210 Rel.27165n (from 0)
CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N
References