CVE-2026-102368 Plaintext Storage of a Device-Specific Private Key in Tapo S505 Firmware

Affected Tapo device firmware stores device-specific cryptographic material in plaintext within nonvolatile storage. An attacker with physical access to an affected device can recover this sensitive material from the firmware. Successful exploitation of this vulnerability may result in the...

CVE-2026-102368

Affected Tapo device firmware, specifically the Tapo S505 , contains a vulnerability where device-specific cryptographic material is stored in plaintext within nonvolatile storage. An attacker with physical access to the device can recover this sensitive material from the firmware. Successful exp...