{"id":41852,"date":"2026-10-20T08:33:30","date_gmt":"2026-10-20T00:33:30","guid":{"rendered":"https:\/\/www.54iter.cn\/?vuln=cve-2026-105814"},"modified":"2026-10-20T08:33:30","modified_gmt":"2026-10-20T00:33:30","slug":"cve-2026-105814","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2026-105814","title":{"rendered":"CVE-2026-105814 &#8211; TP-Link Tapo\nC210 V3.60 contains an authentication bypass vulnerability in the DS JSON API"},"content":{"rendered":"<p>TP-Link Tapo<br \/>\nC210 V3.60 contains an authentication bypass vulnerability in the DS JSON API.<br \/>\nA crafted JSON request containing both a protected operation and public<br \/>\nonboarding-related fields may cause module-level authorization checks to be<br \/>\napplied inconsistently, allowing protected camera operations, including<br \/>\npan-tilt-zoom control, to be executed without a valid authenticated<br \/>\nsession.\u00a0<\/p>\n<p>Successful<br \/>\nexploitation may allow an unauthenticated attacker on the adjacent network to<br \/>\nperform protected camera operations, including pan-tilt-zoom (PTZ) control,<br \/>\nwithout a valid authenticated session. This could result in unauthorized<br \/>\nmanipulation of camera functionality.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>TP-Link Tapo<br \/>\nC210 V3.60 contains an authentication bypass vulnerability in the DS JSON API.<br \/>\nA crafted JSON request containing both a protected operation and public<br \/>\nonboarding-related fields may cause <\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-41852","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/41852","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=41852"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=41852"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=41852"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}