https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T23:22:39.971622+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-14300 CVE-2025-14300 — Unauthenticated Access to connectAP API Endpoint on Tapo C100, C200 & C425 2026-10-16T23:22:39.988390+00:00

Affected: TP-Link Systems Inc. Tapo C200, TP Link Systems Inc. Tapo C100 v5, TP Link Systems Inc. Tapo C425 v1.2

The HTTPS service on Tapo C200 v3, v5, C425 v1.2 and C100 v5  exposes a connectAP interface without proper authentication. An unauthenticated attacker on the same local network segment can exploit this to modify the device’s Wi-Fi configuration, resulting in loss of connectivity and denial-of-service (DoS).