VYPR

Cloud MQTT proxy

by Tapo

CVEs (1)

  • CVE-2026-105822HigNov 3, 2026
    risk 0.54cvss —epss —

    The Tapo Cloud MQTT proxy contains a server-side request forgery (SSRF) vulnerability because it accepts a user-controlled host value without sufficient input validation. An attacker may exploit this vulnerability to cause the Tapo Cloud service to send requests to an…