CVE-2026-105822
Received Received - Intake

SSRF in Tapo Cloud MQTT Proxy

Publication date: 2026-11-03

Last updated on: 2026-11-03

Assigner: TPLink

Description
The Tapo Cloud MQTT proxy contains a server-side request forgery (SSRF) vulnerability because it accepts a user-controlled host value without sufficient input validation. An attacker may exploit this vulnerability to cause the Tapo Cloud service to send requests to an attacker-controlled server. Successful exploitation may cause the Tapo Cloud service to send a request to an attacker-controlled server, exposing the internal information and causing potential Distributed Denial-of-Service (DDoS).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-03
Last Modified
2026-11-03
Generated
2026-11-03
AI Q&A
2026-11-03
EPSS Evaluated
N/A
NVD
CVE-2026-105822
EUVD
EUVD-2026-116271

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
TP-Link Systems Inc. Tapo Cloud Service 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-918 The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a server-side request forgery (SSRF) in the Tapo Cloud MQTT proxy. It occurs because the service accepts a user-controlled host value without proper input validation. An attacker can exploit this to trick the Tapo Cloud service into sending requests to a server they control.

Impact Analysis

Exploitation may expose internal information from the Tapo Cloud service and could lead to a Distributed Denial-of-Service (DDoS) attack. This could disrupt services and potentially leak sensitive data.

Mitigation Strategies

Update the Tapo Cloud service to the latest version to ensure the SSRF vulnerability is patched. Monitor network traffic for unusual outbound requests to external servers. Restrict access to the MQTT proxy service to trusted networks only.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-105822. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...