CVE-2026-9032 | TP-Link Tapo C120/Tapo C200 Https Onboarding Connect Request Parser null pointer dereference

October 1, 2026 Yanac

A vulnerability identified as critical has been detected in TP-Link Tapo C120 and Tapo C200. This issue affects some unknown processing of the component Https Onboarding Connect Request Parser. The manipulation leads to null pointer dereference.

This vulnerability is uniquely identified as CVE-2026-9032. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More