Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2026-34126
PUBLISHED
More InfoOfficial Page
Assigner-TPLink
Assigner Org ID-f23511db-6c3e-4e32-a477-6aa17d310630
View Known Exploited Vulnerability (KEV) details
Published At-28 May, 2026 | 16:47
Updated At-28 May, 2026 | 19:25
Rejected At-
▼CVE Numbering Authority (CNA)
Bluetooth Communication Uses Unencrypted Transmission During Initial Setup on TP-Link's Tapo L535E, P300 and D100C

TP-Link has identified a vulnerability in Tapo L535E v1.0 and v3.0, Tapo P300 v1.0, and Tapo D100C v1.0, where Bluetooth communication during the initial setup phase is transmitted in cleartext without encryption. Bluetooth is only used during initialization. An attacker within the Bluetooth range could exploit this behavior using Bluetooth sniffing or man-in-the-middle techniques, which may allow eavesdropping on Bluetooth communication, manipulate transmitted setup data and potentially gain unauthorized control of the device during initialization.  An attacker within the Bluetooth range could exploit this behavior using Bluetooth sniffing or man-in-the-middle techniques, which may allow eavesdropping on Bluetooth communication, manipulate transmitted setup data and potentially gain unauthorized control of the device during initialization. D100C is the chime delivered with your Tapo camera, and it is delivered with the following Tapo products: D130, D210, D235, D225, TD21, TDB21 and TD25

Affected Products
Vendor
TP-Link Systems Inc.
Product
Tapo L535E v1.0, v3.0
Platforms
  • RTOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.4.1 Build 251016 Rel.204554 (custom)
Vendor
TP-Link Systems Inc.
Product
Tapo P300 v1.0
Platforms
  • RTOS
Default Status
unaffected
Versions
Affected
  • From 0 before EU_1.4.2 Build 251219 Rel.142654 (custom)
  • From 0 before JP_1.4.0 Build 260416 Rel.014037 (custom)
Vendor
TP Link Systems Inc.
Product
Tapo D100C v1.0
Platforms
  • RTOS
Default Status
unaffected
Versions
Affected
  • From 0 before 1.3.1 Build 260421 Rel.031658 (custom)
Problem Types
TypeCWE IDDescription
CWECWE-319CWE-319 Cleartext transmission of sensitive information
Type: CWE
CWE ID: CWE-319
Description: CWE-319 Cleartext transmission of sensitive information
Metrics
VersionBase scoreBase severityVector
4.07.3HIGH
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N
Version: 4.0
Base score: 7.3
Base severity: HIGH
Vector:
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N
Metrics Other Info
Impacts
CAPEC IDDescription
CAPEC-157CAPEC-157 Sniffing Attacks
CAPEC ID: CAPEC-157
Description: CAPEC-157 Sniffing Attacks
Solutions

Configurations

Workarounds

Exploits

Credits

finder
eyegrep and izurina from L Plus LLC
Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
https://www.tp-link.com/us/support/download/tapo-l535e/#Firmware-Release-Notes
patch
https://www.tp-link.com/en/support/download/tapo-l535e/v3/#Firmware-Release-Notes
patch
https://www.tp-link.com/jp/support/download/tapo-p300/#Firmware-Release-Notes
patch
https://www.tp-link.com/en/support/download/tapo-p300/#Firmware-Release-Notes
patch
https://www.tp-link.com/jp/support/download/tapo-l535e/#Firmware-Release-Notes
patch
https://www.tp-link.com/us/support/faq/5106/
vendor-advisory
Hyperlink: https://www.tp-link.com/us/support/download/tapo-l535e/#Firmware-Release-Notes
Resource:
patch
Hyperlink: https://www.tp-link.com/en/support/download/tapo-l535e/v3/#Firmware-Release-Notes
Resource:
patch
Hyperlink: https://www.tp-link.com/jp/support/download/tapo-p300/#Firmware-Release-Notes
Resource:
patch
Hyperlink: https://www.tp-link.com/en/support/download/tapo-p300/#Firmware-Release-Notes
Resource:
patch
Hyperlink: https://www.tp-link.com/jp/support/download/tapo-l535e/#Firmware-Release-Notes
Resource:
patch
Hyperlink: https://www.tp-link.com/us/support/faq/5106/
Resource:
vendor-advisory
▼Authorized Data Publishers (ADP)
CISA ADP Vulnrichment
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
Details not found