{"metadata": {"vulnerability": "CVE-2026-108473", "count": 14, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-10-09T22:41:44.707Z", "date_only": false, "value": "2026-10-09T22:41:44.707Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-108473", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-14T00:06:08.695Z", "date_only": false, "value": "2026-10-14T00:06:08.695Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-108473", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-14T00:06:08.695Z", "date_only": false, "value": "2026-10-14T00:06:08.695Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / TPLink", "record": "CVE-2026-108473", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T01:17:06Z", "date_only": false, "value": "2026-10-14T01:17:06Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-JMMX-R2FG-MCGH", "record": "GHSA-JMMX-R2FG-MCGH", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-14T01:17:06.030Z", "date_only": false, "value": "2026-10-14T01:17:06.030", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-108473", "record": "FKIE_CVE-2026-108473", "field": "published"}, {"timestamp": "2026-10-14T01:48:14.489Z", "date_only": false, "value": "2026-10-14T01:48:14.489336Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ayoqdpn7ppcxo", "record": "CVE-2026-108473", "field": "creation_timestamp", "uuid": "037426e7-d503-4539-8470-ae82596bd29b", "content": "CVE-2026-108473 - Improper Authentication and Credential Exposure in Multiple TP-Link Kasa Devices\nCVE ID : CVE-2026-108473\n \n Published : Oct. 14, 2026, 12:06 a.m. | 1\u00a0hour, 19\u00a0minutes ago\n \n Description : Multiple\nKasa devices contain an improper authentication vulnerability...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/ayoqdpn7ppcxo"}, {"timestamp": "2026-10-14T03:30:37Z", "date_only": false, "value": "2026-10-14T03:30:37Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-JMMX-R2FG-MCGH", "record": "GHSA-JMMX-R2FG-MCGH", "field": "published"}, {"timestamp": "2026-10-14T03:30:37Z", "date_only": false, "value": "2026-10-14T03:30:37Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-JMMX-R2FG-MCGH", "record": "GHSA-JMMX-R2FG-MCGH", "field": "modified"}, {"timestamp": "2026-10-14T16:12:47.286Z", "date_only": false, "value": "2026-10-14T16:12:47.286355Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117440142810354428", "record": "CVE-2026-108473", "field": "creation_timestamp", "uuid": "48a74592-d77b-4244-83bb-15939cb997ff", "content": "CVE-2026-108473 Improper Authentication and Credential Exposure in Multiple TP-Link Kasa Devices MultipleKasa devices contain an improper authentication vulnerability in the localdevice-management protocol. An unauthenticated adjacent attacker may sendmanagement instructions to an affected device without adequate authenticationor authorization, allowing modification of the device state or managementsettings. Under certain usage conditions involving interaction between theuser, mobile application, and device-cloud service, insufficient protection ofaccount-related communications may also expose account information.\nSuccessfulexploitation may allow an unauthenticated adjacent-network attacker to performunauthorized device-management actions and disrupt legitimate user control.Under certain conditions, account-related information may also be exposed,potentially leading to compromise of the associated cloud account.\nhttps://www.cve.org/CVERecord?id=CVE-2026-108473https://www.tp-link.com/us/support/download/https://www.tp-link.com/en/support/download/https://www.tp-link.com/us/support/faq/5342/#TP-LinkSystemsInc. #HS103v5 #EP10v1 #EP40v1 #HS200v5 #KP401v1 #KS230KITv2 #KP405v1 #HS220v3 #KP115v1 #HS210v3 #HS300v2 #KP200v3 #KP303v2 #KS200v1 #EP40Av1 #KS220v1 #KS200Mv1 #ES20Mv1 #KS220Mv1 #KP400v3 #KL125v4 #KL135v2 #KL110v4 #KL420L5v1#CVE_2026_108473#bot", "url": "https://infosec.exchange/users/cve/statuses/117440142810354428"}, {"timestamp": "2026-10-14T18:06:09.190Z", "date_only": false, "value": "2026-10-14T18:06:09.190374Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-108473", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-14T18:06:09.190Z", "date_only": false, "value": "2026-10-14T18:06:09.190374Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-108473", "record": "FKIE_CVE-2026-108473", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-14T18:06:29.150Z", "date_only": false, "value": "2026-10-14T18:06:29.150Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-108473", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-14T18:06:29.150Z", "date_only": false, "value": "2026-10-14T18:06:29.150Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-108473", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T15:53:08.287Z", "date_only": false, "value": "2026-10-15T15:53:08.287", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-108473", "record": "FKIE_CVE-2026-108473", "field": "lastModified"}]}