These popular TP-Link home security cameras could be hacked to spy on you while you sleep, experts warn
A fix is already available to download, so act now
by https://www.techradar.com/author/rahim-amir · TechRadarNews By Rahim Amir Published 23 September 2026
Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Subscribe to our newsletter
- Cybersecurity company OPSWAT found a login bypass and a crash bug in TP-Link's Tapo C200 cameras
- TP-Link has extended that to include its C120 offering too
- Anyone on the same network could get admin access, live video, and recordings without requiring the owner's credentials
Security researchers at OPSWAT have detailed two high-severity flaws in TP-Link's Tapo C200, a pan-and-tilt indoor camera listed on Amazon for $26.99 and sold as a baby monitor and pet camera.
The more serious issue is that someone on the same network can log in as the camera's administrator without the password, accessing the live feed and stored recordings.
At least one other bug, which OPSWAT rates as critical in the same disclosure but does not detail, has not been published.
Latest Videos FromTechRadarWatch full video here:
A localized login that requires no authentication
The TP-Link Tapo C200, as we noted in previous coverage of the incident, isn't just another security camera that happens to be vulnerable; it is one of the most popular models on the market, clocking in at over 3,000 sales on Amazon alone.
The Tapo C120, in its current iteration, sells over 5,000 units monthly, even as the advisory notes that its V1 hardware version is currently compromised until users update the firmware on their devices.
Both SKUs have received firmware updates that patch the vulnerabilities (CVE-2026-15315 & CVE-2026-15316), which are assigned 'high' scores of 8.7 and 7.1, respectively. However, according to TP-Link, CVE-2026-15316 does not affect the C120 camera.
However, the former vulnerability is the more pressing of the two and, according to OPSWAT, is particularly problematic for users because of how the C120 and C200 cameras function.
Are you a pro? Subscribe to our newsletter
Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!
Contact me with news and offers from other Future brandsReceive email from us on behalf of our trusted partners or sponsors