Research topic

IoT & Embedded Security

Cameras and connected devices, from firmware to onboarding.

2026

Oct 16October
IoT & Embedded SecurityTP-Link Tapo C200 / C120
Chaining a replayed login into full control of a home camera
Three flaws in a popular home camera combine into one path: replay a login, take an admin session, then inject commands into a diagnostic service. Here is how the chain works and how to shut it down.insomina and theblackturtleOPSWAT Unit 5152 min readOS command executionCVE-2026-102369CVE-2026-15315CVE-2026-15316

First IoT & Embedded Security publication · October 2026