All vulnerabilities
CVE-2026-102368

Plaintext Storage of a Device-Specific Private Key in Tapo S505 Firmware

TP-Link System Inc. Tapo S505 v1.6Network & edge
Open in ThreatlineRecord JSON
CVSS
5.4Medium
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.10%Chance of exploitation activity in the next 30 days, higher than 0% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in1.4.1 Build 260713Fixed versionCVE List
Published8 Oct 2026Updated 9 Oct 2026CVE List

What fixes it

  • 1.4.1 Build 260713Tapo S505 v1.6CVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

Affected Tapo device firmware stores device-specific cryptographic material in plaintext within nonvolatile storage. An attacker with physical access to an affected device can recover this sensitive material from the firmware.

Successful exploitation of this vulnerability may result in the disclosure of device-specific cryptographic material and could, under certain conditions, increase the risk of unauthorized access to related protected information or communications.

Text from CVE List

Affected versions 1

  • Tapo S505 v1.6affected: all versions before 1.4.1 Build 260713CVE List

References 2