{"metadata": {"vulnerability": "CVE-2026-9770", "count": 21, "kinds": {"milestone": 4, "sighting": 9, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-05-27T22:00:46.491Z", "date_only": false, "value": "2026-05-27T22:00:46.491Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-9770", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-07-15T00:21:06.126Z", "date_only": false, "value": "2026-07-15T00:21:06.126Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-9770", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-07-15T00:21:06.126Z", "date_only": false, "value": "2026-07-15T00:21:06.126Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / TPLink", "record": "CVE-2026-9770", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-15T01:17:10Z", "date_only": false, "value": "2026-07-15T01:17:10Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-Q3G3-7Q7P-5JWV", "record": "GHSA-Q3G3-7Q7P-5JWV", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-07-15T01:17:10.387Z", "date_only": false, "value": "2026-07-15T01:17:10.387", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-9770", "record": "FKIE_CVE-2026-9770", "field": "published"}, {"timestamp": "2026-07-15T03:32:51Z", "date_only": false, "value": "2026-07-15T03:32:51Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-Q3G3-7Q7P-5JWV", "record": "GHSA-Q3G3-7Q7P-5JWV", "field": "published"}, {"timestamp": "2026-07-15T03:46:31.242Z", "date_only": false, "value": "2026-07-15T03:46:31.242752Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqnspns63k2e", "record": "CVE-2026-9770", "field": "creation_timestamp", "uuid": "cb59c6cd-8021-4628-a0fa-1df4b43d314b", "content": "CVE-2026-9770 - Hardcoded Cryptographic Key Information Disclosure Vulnerability on TP-Link Kasa EC70 and EC71\nCVE ID : CVE-2026-9770\n \n Published : July 15, 2026, 1:17 a.m. | 2\u00a0hours, 14\u00a0minutes ago\n \n Description : Kasa EC71 v4 and EC70 v4 firmware contains a static cryptogr...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqnspns63k2e"}, {"timestamp": "2026-07-15T12:37:44.275Z", "date_only": false, "value": "2026-07-15T12:37:44.275721Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-9770", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-07-15T12:37:44.275Z", "date_only": false, "value": "2026-07-15T12:37:44.275721Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-9770", "record": "FKIE_CVE-2026-9770", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-07-15T12:38:03.180Z", "date_only": false, "value": "2026-07-15T12:38:03.180Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-9770", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-15T12:38:03.180Z", "date_only": false, "value": "2026-07-15T12:38:03.180Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-9770", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-17T01:53:00.317Z", "date_only": false, "value": "2026-07-17T01:53:00.317536Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mqsncizm5p2y", "record": "CVE-2026-9770", "field": "creation_timestamp", "uuid": "1e3f8740-f28b-4769-8c90-c133e3938bcd", "content": "TP-Link Kasa vulnerability CVE-2026-9770 (CVSS 8.6) lets local attackers intercept admin credentials on EC70 and EC71 cameras. Update firmware now.\n\n#TPLink #Kasa #IoTSecurity #CVE20269770 #InfoDisclosure", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mqsncizm5p2y"}, {"timestamp": "2026-07-18T14:08:20.042Z", "date_only": false, "value": "2026-07-18T14:08:20.042654Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/lu1tr0n.bsky.social/post/3mqwguc4uw52j", "record": "CVE-2026-9770", "field": "creation_timestamp", "uuid": "dfc063fc-6887-438b-ad81-caea8523024d", "content": "Kasa EC71: CVE-2026-9770 y el GPS sin login\n\nhttps://elsolitario.org/2026/07/18/kasa-ec71-vulnerabilidades-iot-firmware/?utm_source=bluesky&utm_medium=social&utm_campaign=programacion\n\n#Ciberseguridad #InfoSec #Security", "url": "https://bsky.app/profile/lu1tr0n.bsky.social/post/3mqwguc4uw52j"}, {"timestamp": "2026-07-20T05:40:06.436Z", "date_only": false, "value": "2026-07-20T05:40:06.436036Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mr2lfedbzj2g", "record": "CVE-2026-9770", "field": "creation_timestamp", "uuid": "da2d78a2-9b8d-4002-9be9-d6e713cf9693", "content": "A TP-Link Kasa vulnerability (CVE-2026-9770) lets local attackers steal admin credentials via a hardcoded key. Patch your EC70 and EC71 firmware now.\n\n#TPLink #Kasa #CVE20269770 #IoTSecurity #Cameras #ManInTheMiddle", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mr2lfedbzj2g"}, {"timestamp": "2026-07-27T13:06:00.592Z", "date_only": false, "value": "2026-07-27T13:06:00.592559Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrmxl5alzs23", "record": "CVE-2026-9770", "field": "creation_timestamp", "uuid": "1726c430-9aa0-4868-84b4-41023b616ad0", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-9770: \u0423\u0433\u0440\u043e\u0437\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 TP-Link Kasa EC70 \u0438 EC71\n\n\n\nhttps://kripta.biz/posts/CD28DC2B-39C2-4716-9F2F-75B702898EEE", "url": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrmxl5alzs23"}, {"timestamp": "2026-08-06T18:20:49.317Z", "date_only": false, "value": "2026-08-06T18:20:49.317", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-9770", "record": "FKIE_CVE-2026-9770", "field": "lastModified"}, {"timestamp": "2026-08-06T18:30:29Z", "date_only": false, "value": "2026-08-06T18:30:29Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-Q3G3-7Q7P-5JWV", "record": "GHSA-Q3G3-7Q7P-5JWV", "field": "modified"}, {"timestamp": "2026-08-21T23:00:08.772Z", "date_only": false, "value": "2026-08-21T23:00:08.772600Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/2133", "record": "CVE-2026-9770", "field": "creation_timestamp", "uuid": "b56c8d1b-7a2b-42bc-8e5c-090a803246a3", "content": "\ud83d\udd34 TP-Link Kasa Camera Flaws Let Attackers Steal Admin Credentials and Geolocation Data\n\nTP-Link has revealed several serious vulnerabilities affecting its Kasa EC70 and EC71 smart camera models, which could expose users to credential theft and geolocation data leakage.\n\nThese vulnerabilities are CVE-2026-9770 and CVE-2026-13230 and specifically affect version 4 of both devices. Attackers with access to the same local network could exploit these flaws, raising concerns about lateral movement risks in both home and enterprise environments.", "url": "https://t.me/pphm_HackerNews/2133"}, {"timestamp": "2026-09-08T11:50:59.593Z", "date_only": false, "value": "2026-09-08T11:50:59.593466Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/BadChemical/IoT-Vulnerability-Research-Public/blob/main/TP-Link_Kasa_EC71/Kasa_EC71.md", "record": "CVE-2026-9770", "field": "creation_timestamp", "uuid": "1aed4d60-f9da-4d91-a9c5-324a8a90adab", "url": "https://github.com/BadChemical/IoT-Vulnerability-Research-Public/blob/main/TP-Link_Kasa_EC71/Kasa_EC71.md"}, {"timestamp": "2026-09-08T11:58:09.106Z", "date_only": false, "value": "2026-09-08T11:58:09.106940Z", "kind": "sighting", "label": "Seen", "source": "https://vulnerability.circl.lu/comment/3f4a59e6-61ef-4b4c-bb57-07f721f9db14", "record": "CVE-2026-9770", "field": "creation_timestamp", "uuid": "db7c7308-65d7-40ba-a887-60a666afb5a6", "url": "https://vulnerability.circl.lu/comment/3f4a59e6-61ef-4b4c-bb57-07f721f9db14"}, {"timestamp": "2026-09-08T12:07:26.806Z", "date_only": false, "value": "2026-09-08T12:07:26.806154Z", "kind": "sighting", "label": "Seen", "source": "https://social.circl.lu/users/cedric/statuses/117235334851153312", "record": "CVE-2026-9770", "field": "creation_timestamp", "uuid": "5d1a63e9-d8d2-48cd-8413-0758281ddd3e", "content": "LG TV discovery traffic and CVE-2026-13230 \u2014 a possible interaction with CVE-2026-9770? \nhttps://vulnerability.circl.lu/comment/3f4a59e6-61ef-4b4c-bb57-07f721f9db14\n#vulnerability #gcve #cve #LG #tplink", "url": "https://social.circl.lu/users/cedric/statuses/117235334851153312"}]}