CVE-2026-102368 MEDIUM

CVE-2026-102368: Plaintext Storage of a Device-Specific Private Key in Tapo S505 Firmware

Vendor Tp-Link System Inc.
Product Tapo S505 v1.6
Weakness CWE-312 · Cleartext storage
Published October 8, 2026
Last update October 9, 2026

CVSS base score

5.4/10
Attack vector Physical
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Affected Tapo device firmware stores device-specific cryptographic material in plaintext within nonvolatile storage. An attacker with physical access to an affected device can recover this sensitive material from the firmware.  Successful exploitation of this vulnerability may result in the disclosure of device-specific cryptographic material and could, under certain conditions, increase the risk of unauthorized access to related protected information or communications.

Key dates

02Disclosure timeline

October 8, 2026 CVE published
October 9, 2026 Record updated