CVE-2026-0653 - Insecure Access Control on TP-Link Tapo D235 and C260

Back Back to CVE browser

HIGH

Insecure Access Control on TP-Link Tapo D235 and C260

Published Feb 10, 2026

7.2

HIGH

CVSS 4.0

EPSS 0.41%

Description

On TP-Link Tapo C260 v1 and D235 v1, a guest‑level authenticated user can bypass intended access restrictions by sending crafted requests to a synchronization endpoint. This allows modification of protected device settings despite limited privileges. An attacker may change sensitive configuration parameters without authorization, resulting in unauthorized device state manipulation but not full code execution.

Affected products

Vendor TP-Link Systems Inc. Product Tapo C260 v1 Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <1.1.9 Build 251226 Rel.55870n
Vendor TP-Link Systems Inc. Product Tapo D235 v1 Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <1.2.2 Build 260210 Rel.27165n

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

TP-Link Systems Inc.

Tapo C260 v1

unaffected

Version	Status	Constraints
0	affected	<1.1.9 Build 251226 Rel.55870n

TP-Link Systems Inc.

Tapo D235 v1

unaffected

Version	Status	Constraints
0	affected	<1.2.2 Build 260210 Rel.27165n

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-284

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-7070
Advisory
https://www.tp-link.com/en/support/download/tapo-c260/v1/
patchProduct
https://www.tp-link.com/en/support/download/tapo-d235/
patch
https://www.tp-link.com/us/support/download/tapo-c260/v1/
patchProduct
https://www.tp-link.com/us/support/faq/4960/
vendor-advisoryVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-7070		Advisory
https://www.tp-link.com/en/support/download/tapo-c260/v1/		patchProduct
https://www.tp-link.com/en/support/download/tapo-d235/		patch
https://www.tp-link.com/us/support/download/tapo-c260/v1/		patchProduct
https://www.tp-link.com/us/support/faq/4960/		vendor-advisoryVendor Advisory