---
id: CVE-2026-105674
title: |-
  TP-Link Tapo
  C325WB V2 generates the pre-shared key used by its local media streaming
  service with a time-seeded pseudo-random number generator, making the key
  predictable and recoverable
summary: |-
  TP-Link Tapo
  C325WB V2 generates the pre-shared key used by its local media streaming
  service with a time-seeded pseudo-random number generator, making the key
  predictable and recoverable. An unauthenticated attacker on the adjacent
  netw…
severity: high
cvss: 8.7
cvssVector: 'CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'
cwe:
  - CWE-330
vendor: TP-Link Systems Inc.
product: Tapo C325WB v2
affected:
  - tapo_c325wb_v2 < V2_1.3.3 Build 260914
published: '2026-10-08'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T16:17:34.640'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-105674'
references:
  - url: >-
      https://www.tp-link.com/en/support/download/tapo-c325wb/#Firmware-Release-Notes
    label: f23511db-6c3e-4e32-a477-6aa17d310630
  - url: >-
      https://www.tp-link.com/us/support/download/tapo-c325wb/#Firmware-Release-Notes
    label: f23511db-6c3e-4e32-a477-6aa17d310630
  - url: 'https://www.tp-link.com/us/support/faq/5333/'
    label: f23511db-6c3e-4e32-a477-6aa17d310630
tags:
  - nvd
  - cve.org
epss: 0.00266
epssPercentile: 0.18666
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-15T15:20:55.782424Z'
cvssSource: cna
ingestedAt: '2026-10-09T00:19:50.968Z'
---

## Overview

TP-Link Tapo
C325WB V2 generates the pre-shared key used by its local media streaming
service with a time-seeded pseudo-random number generator, making the key
predictable and recoverable. An unauthenticated attacker on the adjacent
network can recover the key and authenticate to the media streaming service
without valid user credentials. 









Successful
exploitation may allow an unauthenticated adjacent-network attacker to access
and take over live video and audio streams, compromising the confidentiality
and integrity of camera media.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.