CVE-2026-105822

The Tapo Cloud MQTT proxy is susceptible to a Server-Side Request Forgery (SSRF) vulnerability because it fails to perform sufficient input validation on user-controlled host values. An attacker can exploit this flaw to force the Tapo Cloud service to send requests to an attacker-controlled serve...