# CVE-2026-105814: TP-Link Tapo C210 authentication bypass in DS JSON API

Source: https://junglewise.ai/threats/cve-2026-105814-tp-link-tapo-c210-v3-60-contains-an-authentication-bypass  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-19. Updated: 2026-10-19  
License: CC BY 4.0 with a link back

CVE-2026-105814 · Severity: info · Published 2026-10-19

The TP-Link Tapo C210 is a pan-tilt-zoom network camera used for home and business surveillance. A crafted JSON request can trick the camera's authentication system into allowing pan-tilt-zoom control and other protected operations without a valid login. An attacker on the local network could remotely manipulate camera positioning and functionality without authorization.

Vendors: [TP-Link](https://junglewise.ai/threats/vendors/tp-link).

## Quick answers

**Is CVE-2026-105814 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-105814 being exploited in the wild.

**How severe is CVE-2026-105814?** Informational severity, published 19 October 2026.

**Which products and versions are affected?** TP-Link Tapo C210 V3.60.

**Is there a fix for CVE-2026-105814?** Yes: fixed in V3.6_1.2.7 Build 260818. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-105814 attacked?** It is attacked from the adjacent network, in a network appliance.

**Am I affected by CVE-2026-105814?** Check whether you run TP-Link Tapo C210 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in V3.6_1.2.7 Build 260818

## Technical details

An order-dependent authentication bypass in the DS JSON API allows attackers to bypass module-level authorization checks by combining protected operations with public onboarding-related JSON fields in a single request. The vulnerability requires adjacent network access and no authentication, allowing execution of privileged camera operations including PTZ control. A fix is available in firmware build 260818.

## Affected products

- TP-Link Tapo C210 V3.60

## Timeline

- 2026-10-19: disclosed

## References

- [https://www.tp-link.com/us/support/download/tapo-c210/](https://www.tp-link.com/us/support/download/tapo-c210/)
- [https://www.tp-link.com/us/support/faq/5352/](https://www.tp-link.com/us/support/faq/5352/)

## Related threats

- [TP-Link Tapo C210 credential exposure in DS JSON API](https://junglewise.ai/threats/cve-2026-105815-tp-link-tapo-c210-v3-60-may-expose-shared-credential-material)