<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 03 Oct 2026 01:41:59 +0000</lastBuildDate>
    <item>
      <title>CVE-2026-15316 — Denial-of-Service via Oversized Encrypted Credential Input in TP-Link Tapo C200</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-15316</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; TP-Link Systems Inc. Tapo C200 v5&lt;/p&gt;
&lt;p&gt;An improper input
validation vulnerability in the configuration service for processing encrypted
credential data has been identified in Tapo C200 v5.  An attacker can send oversized crypted
ciphertext values that may trigger exception handling failures, due to insufficient
validation, causing the affected device to crash or restart.&lt;/p&gt;
&lt;p&gt;Successful
exploitation may temporarily disrupt HTTPS management and monitoring
functionality, resulting in a denial-of-service (DoS) condition until the
service recovers.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; TP-Link Systems Inc. Tapo C200 v5&lt;/p&gt;
&lt;p&gt;An improper input
validation vulnerability in the configuration service for processing encrypted
credential data has been identified in Tapo C200 v5.  An attacker can send oversized crypted
ciphertext values that may trigger exception handling failures, due to insufficient
validation, causing the affected device to crash or restart.&lt;/p&gt;
&lt;p&gt;Successful
exploitation may temporarily disrupt HTTPS management and monitoring
functionality, resulting in a denial-of-service (DoS) condition until the
service recovers.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-15316</guid>
    </item>
  </channel>
</rss>
