CVE-2025-15557 - Improper Certificate Validation in TP-Link Tapo H100 and P100 Allows Man-in-the-...

CVE ID : CVE-2025-15557 Published : Feb. 5, 2026, 5:45 p.m. | 27 minutes ago Description : An Improper Certificate Validation vulnerability in TP-Link Tapo H100 v1 and Tapo P100 v1 allows an on-path attacker on the same network segment to intercept and modify encrypted device-cloud communications.  This may compromise the confidentiality and integrity of device-to-cloud communication, enabling manipulation of device data or operations. Severity: 7.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...