{"id":"CVE-2026-105822","published":"2026-11-03T20:18:06.143","lastModified":"2026-11-03T20:18:06.143","description":"The Tapo\nCloud MQTT proxy contains a server-side request forgery (SSRF) vulnerability\nbecause it accepts a user-controlled host value without sufficient input\nvalidation. An attacker may exploit this vulnerability to cause the Tapo Cloud\nservice to send requests to an attacker-controlled server.\n\n\n\n\n\n\n\n\n\nSuccessful\nexploitation may cause the Tapo Cloud service to send a request to an\nattacker-controlled server, exposing the internal information and causing\npotential Distributed Denial-of-Service (DDoS).","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-918"],"vendors":[],"products":[],"references":[{"url":"https://www.tp-link.com/us/support/faq/5370/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}