{"metadata": {"vulnerability": "cve-2026-9770", "count": 21, "kinds": {"milestone": 4, "sighting": 9, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-05-27T22:00:46.491Z", "date_only": false, "value": "2026-05-27T22:00:46.491Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-9770", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-07-15T00:21:06.126Z", "date_only": false, "value": "2026-07-15T00:21:06.126Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-9770", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-15T00:21:06.126Z", "date_only": false, "value": "2026-07-15T00:21:06.126Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / TPLink", "record": "cve-2026-9770", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-15T01:17:10Z", "date_only": false, "value": "2026-07-15T01:17:10Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-Q3G3-7Q7P-5JWV", "record": "GHSA-Q3G3-7Q7P-5JWV", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-07-15T01:17:10.387Z", "date_only": false, "value": "2026-07-15T01:17:10.387", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-9770", "record": "FKIE_CVE-2026-9770", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-15T03:32:51Z", "date_only": false, "value": "2026-07-15T03:32:51Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-Q3G3-7Q7P-5JWV", "record": "GHSA-Q3G3-7Q7P-5JWV", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-15T03:46:31.242Z", "date_only": false, "value": "2026-07-15T03:46:31.242752Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqnspns63k2e", "record": "CVE-2026-9770", "field": "creation_timestamp", "uuid": "cb59c6cd-8021-4628-a0fa-1df4b43d314b", "content": "CVE-2026-9770 - Hardcoded Cryptographic Key Information Disclosure Vulnerability on TP-Link Kasa EC70 and EC71\nCVE ID : CVE-2026-9770\n \n Published : July 15, 2026, 1:17 a.m. | 2\u00a0hours, 14\u00a0minutes ago\n \n Description : Kasa EC71 v4 and EC70 v4 firmware contains a static cryptogr...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqnspns63k2e"}, {"timestamp": "2026-07-15T12:37:44.275Z", "date_only": false, "value": "2026-07-15T12:37:44.275721Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-9770", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-07-15T12:37:44.275Z", "date_only": false, "value": "2026-07-15T12:37:44.275721Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-9770", "record": "FKIE_CVE-2026-9770", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-07-15T12:38:03.180Z", "date_only": false, "value": "2026-07-15T12:38:03.180Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-9770", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-15T12:38:03.180Z", "date_only": false, "value": "2026-07-15T12:38:03.180Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-9770", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-17T01:53:00.317Z", "date_only": false, "value": "2026-07-17T01:53:00.317536Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mqsncizm5p2y", "record": "CVE-2026-9770", "field": "creation_timestamp", "uuid": "1e3f8740-f28b-4769-8c90-c133e3938bcd", "content": "TP-Link Kasa vulnerability CVE-2026-9770 (CVSS 8.6) lets local attackers intercept admin credentials on EC70 and EC71 cameras. Update firmware now.\n\n#TPLink #Kasa #IoTSecurity #CVE20269770 #InfoDisclosure", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mqsncizm5p2y"}, {"timestamp": "2026-07-18T14:08:20.042Z", "date_only": false, "value": "2026-07-18T14:08:20.042654Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/lu1tr0n.bsky.social/post/3mqwguc4uw52j", "record": "CVE-2026-9770", "field": "creation_timestamp", "uuid": "dfc063fc-6887-438b-ad81-caea8523024d", "content": "Kasa EC71: CVE-2026-9770 y el GPS sin login\n\nhttps://elsolitario.org/2026/07/18/kasa-ec71-vulnerabilidades-iot-firmware/?utm_source=bluesky&utm_medium=social&utm_campaign=programacion\n\n#Ciberseguridad #InfoSec #Security", "url": "https://bsky.app/profile/lu1tr0n.bsky.social/post/3mqwguc4uw52j"}, {"timestamp": "2026-07-20T05:40:06.436Z", "date_only": false, "value": "2026-07-20T05:40:06.436036Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mr2lfedbzj2g", "record": "CVE-2026-9770", "field": "creation_timestamp", "uuid": "da2d78a2-9b8d-4002-9be9-d6e713cf9693", "content": "A TP-Link Kasa vulnerability (CVE-2026-9770) lets local attackers steal admin credentials via a hardcoded key. Patch your EC70 and EC71 firmware now.\n\n#TPLink #Kasa #CVE20269770 #IoTSecurity #Cameras #ManInTheMiddle", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mr2lfedbzj2g"}, {"timestamp": "2026-07-27T13:06:00.592Z", "date_only": false, "value": "2026-07-27T13:06:00.592559Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrmxl5alzs23", "record": "CVE-2026-9770", "field": "creation_timestamp", "uuid": "1726c430-9aa0-4868-84b4-41023b616ad0", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-9770: \u0423\u0433\u0440\u043e\u0437\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 TP-Link Kasa EC70 \u0438 EC71\n\n\n\nhttps://kripta.biz/posts/CD28DC2B-39C2-4716-9F2F-75B702898EEE", "url": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrmxl5alzs23"}, {"timestamp": "2026-08-06T18:20:49.317Z", "date_only": false, "value": "2026-08-06T18:20:49.317", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-9770", "record": "FKIE_CVE-2026-9770", "field": "lastModified"}, {"timestamp": "2026-08-06T18:30:29Z", "date_only": false, "value": "2026-08-06T18:30:29Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-Q3G3-7Q7P-5JWV", "record": "GHSA-Q3G3-7Q7P-5JWV", "field": "modified"}, {"timestamp": "2026-08-21T23:00:08.772Z", "date_only": false, "value": "2026-08-21T23:00:08.772600Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/2133", "record": "CVE-2026-9770", "field": "creation_timestamp", "uuid": "b56c8d1b-7a2b-42bc-8e5c-090a803246a3", "content": "\ud83d\udd34 TP-Link Kasa Camera Flaws Let Attackers Steal Admin Credentials and Geolocation Data\n\nTP-Link has revealed several serious vulnerabilities affecting its Kasa EC70 and EC71 smart camera models, which could expose users to credential theft and geolocation data leakage.\n\nThese vulnerabilities are CVE-2026-9770 and CVE-2026-13230 and specifically affect version 4 of both devices. Attackers with access to the same local network could exploit these flaws, raising concerns about lateral movement risks in both home and enterprise environments.", "url": "https://t.me/pphm_HackerNews/2133"}, {"timestamp": "2026-09-08T11:50:59.593Z", "date_only": false, "value": "2026-09-08T11:50:59.593466Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/BadChemical/IoT-Vulnerability-Research-Public/blob/main/TP-Link_Kasa_EC71/Kasa_EC71.md", "record": "CVE-2026-9770", "field": "creation_timestamp", "uuid": "1aed4d60-f9da-4d91-a9c5-324a8a90adab", "url": "https://github.com/BadChemical/IoT-Vulnerability-Research-Public/blob/main/TP-Link_Kasa_EC71/Kasa_EC71.md", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-08T11:58:09.106Z", "date_only": false, "value": "2026-09-08T11:58:09.106940Z", "kind": "sighting", "label": "Seen", "source": "https://vulnerability.circl.lu/comment/3f4a59e6-61ef-4b4c-bb57-07f721f9db14", "record": "CVE-2026-9770", "field": "creation_timestamp", "uuid": "db7c7308-65d7-40ba-a887-60a666afb5a6", "url": "https://vulnerability.circl.lu/comment/3f4a59e6-61ef-4b4c-bb57-07f721f9db14"}, {"timestamp": "2026-09-08T12:07:26.806Z", "date_only": false, "value": "2026-09-08T12:07:26.806154Z", "kind": "sighting", "label": "Seen", "source": "https://social.circl.lu/users/cedric/statuses/117235334851153312", "record": "CVE-2026-9770", "field": "creation_timestamp", "uuid": "5d1a63e9-d8d2-48cd-8413-0758281ddd3e", "content": "LG TV discovery traffic and CVE-2026-13230 \u2014 a possible interaction with CVE-2026-9770? \nhttps://vulnerability.circl.lu/comment/3f4a59e6-61ef-4b4c-bb57-07f721f9db14\n#vulnerability #gcve #cve #LG #tplink", "url": "https://social.circl.lu/users/cedric/statuses/117235334851153312"}], "metrics": {"as_of": "2026-10-29T05:19:43.346Z", "anchors": {"origin": {"timestamp": "2026-07-15T00:21:06.126Z", "date_only": false, "value": "2026-07-15T00:21:06.126Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-9770", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-07-15T00:21:06.126Z", "date_only": false, "value": "2026-07-15T00:21:06.126Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-9770", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-09-08T11:50:59.593Z", "date_only": false, "value": "2026-09-08T11:50:59.593466Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/BadChemical/IoT-Vulnerability-Research-Public/blob/main/TP-Link_Kasa_EC71/Kasa_EC71.md", "record": "CVE-2026-9770", "field": "creation_timestamp", "uuid": "1aed4d60-f9da-4d91-a9c5-324a8a90adab", "url": "https://github.com/BadChemical/IoT-Vulnerability-Research-Public/blob/main/TP-Link_Kasa_EC71/Kasa_EC71.md", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 4793393.467, "hours": 1331.4981852777778, "days": 55.479091053240744, "min_seconds": 4793393.467, "max_seconds": 4793393.467, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-07-15T00:21:06.126Z", "date_only": false, "value": "2026-07-15T00:21:06.126Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-9770", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-09-08T11:50:59.593Z", "date_only": false, "value": "2026-09-08T11:50:59.593466Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/BadChemical/IoT-Vulnerability-Research-Public/blob/main/TP-Link_Kasa_EC71/Kasa_EC71.md", "record": "CVE-2026-9770", "field": "creation_timestamp", "uuid": "1aed4d60-f9da-4d91-a9c5-324a8a90adab", "url": "https://github.com/BadChemical/IoT-Vulnerability-Research-Public/blob/main/TP-Link_Kasa_EC71/Kasa_EC71.md", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 9176317.22, "hours": 2548.977005555556, "days": 106.20737523148149, "min_seconds": 9176317.22, "max_seconds": 9176317.22, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-07-15T00:21:06.126Z", "date_only": false, "value": "2026-07-15T00:21:06.126Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-9770", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-29T05:19:43.346Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 4382923.753, "hours": 1217.4788202777777, "days": 50.728284178240735, "min_seconds": 4382923.753, "max_seconds": 4382923.753, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-09-08T11:50:59.593Z", "date_only": false, "value": "2026-09-08T11:50:59.593466Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/BadChemical/IoT-Vulnerability-Research-Public/blob/main/TP-Link_Kasa_EC71/Kasa_EC71.md", "record": "CVE-2026-9770", "field": "creation_timestamp", "uuid": "1aed4d60-f9da-4d91-a9c5-324a8a90adab", "url": "https://github.com/BadChemical/IoT-Vulnerability-Research-Public/blob/main/TP-Link_Kasa_EC71/Kasa_EC71.md", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-10-29T05:19:43.346Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}