https://vulnerability.circl.lu/sightings/feed 2026-09-02T11:15:20.746708+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/66a5e6e2-dd90-4aa5-82e0-ee9857e115e2/export 2026-09-02T11:15:20.765219+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "66a5e6e2-dd90-4aa5-82e0-ee9857e115e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9770", "type": "seen", "source": "https://t.me/pphm_HackerNews/2133", "content": "\ud83d\udd34 TP-Link Kasa Camera Flaws Let Attackers Steal Admin Credentials and Geolocation Data\n\nTP-Link has revealed several serious vulnerabilities affecting its Kasa EC70 and EC71 smart camera models, which could expose users to credential theft and geolocation data leakage.\n\nThese vulnerabilities are CVE-2026-9770 and CVE-2026-13230 and specifically affect version 4 of both devices. Attackers with access to the same local network could exploit these flaws, raising concerns about lateral movement risks in both home and enterprise environments.", "creation_timestamp": "2026-08-23T00:00:44.109531Z"} 2026-08-23T00:00:44.109531+00:00 https://vulnerability.circl.lu/sighting/dfea5b80-6c91-4d24-8ecd-eb861f8fbade/export 2026-09-02T11:15:20.767427+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "dfea5b80-6c91-4d24-8ecd-eb861f8fbade", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9770", "type": "seen", "source": "https://t.me/pphm_HackerNews/2133", "content": "\ud83d\udd34 TP-Link Kasa Camera Flaws Let Attackers Steal Admin Credentials and Geolocation Data\n\nTP-Link has revealed several serious vulnerabilities affecting its Kasa EC70 and EC71 smart camera models, which could expose users to credential theft and geolocation data leakage.\n\nThese vulnerabilities are CVE-2026-9770 and CVE-2026-13230 and specifically affect version 4 of both devices. Attackers with access to the same local network could exploit these flaws, raising concerns about lateral movement risks in both home and enterprise environments.", "creation_timestamp": "2026-08-22T00:00:12.248375Z"} 2026-08-22T00:00:12.248375+00:00 https://vulnerability.circl.lu/sighting/b56c8d1b-7a2b-42bc-8e5c-090a803246a3/export 2026-09-02T11:15:20.767578+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b56c8d1b-7a2b-42bc-8e5c-090a803246a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9770", "type": "seen", "source": "https://t.me/pphm_HackerNews/2133", "content": "\ud83d\udd34 TP-Link Kasa Camera Flaws Let Attackers Steal Admin Credentials and Geolocation Data\n\nTP-Link has revealed several serious vulnerabilities affecting its Kasa EC70 and EC71 smart camera models, which could expose users to credential theft and geolocation data leakage.\n\nThese vulnerabilities are CVE-2026-9770 and CVE-2026-13230 and specifically affect version 4 of both devices. Attackers with access to the same local network could exploit these flaws, raising concerns about lateral movement risks in both home and enterprise environments.", "creation_timestamp": "2026-08-21T23:00:08.772600Z"} 2026-08-21T23:00:08.772600+00:00 https://vulnerability.circl.lu/sighting/1726c430-9aa0-4868-84b4-41023b616ad0/export 2026-09-02T11:15:20.767691+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "1726c430-9aa0-4868-84b4-41023b616ad0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9770", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrmxl5alzs23", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-9770: \u0423\u0433\u0440\u043e\u0437\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 TP-Link Kasa EC70 \u0438 EC71\n\n\n\nhttps://kripta.biz/posts/CD28DC2B-39C2-4716-9F2F-75B702898EEE", "creation_timestamp": "2026-07-27T13:06:00.592559Z"} 2026-07-27T13:06:00.592559+00:00 https://vulnerability.circl.lu/sighting/da2d78a2-9b8d-4002-9be9-d6e713cf9693/export 2026-09-02T11:15:20.767795+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "da2d78a2-9b8d-4002-9be9-d6e713cf9693", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9770", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mr2lfedbzj2g", "content": "A TP-Link Kasa vulnerability (CVE-2026-9770) lets local attackers steal admin credentials via a hardcoded key. Patch your EC70 and EC71 firmware now.\n\n#TPLink #Kasa #CVE20269770 #IoTSecurity #Cameras #ManInTheMiddle", "creation_timestamp": "2026-07-20T05:40:06.436036Z"} 2026-07-20T05:40:06.436036+00:00 https://vulnerability.circl.lu/sighting/dfc063fc-6887-438b-ad81-caea8523024d/export 2026-09-02T11:15:20.767898+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "dfc063fc-6887-438b-ad81-caea8523024d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9770", "type": "seen", "source": "https://bsky.app/profile/lu1tr0n.bsky.social/post/3mqwguc4uw52j", "content": "Kasa EC71: CVE-2026-9770 y el GPS sin login\n\nhttps://elsolitario.org/2026/07/18/kasa-ec71-vulnerabilidades-iot-firmware/?utm_source=bluesky&utm_medium=social&utm_campaign=programacion\n\n#Ciberseguridad #InfoSec #Security", "creation_timestamp": "2026-07-18T14:08:20.042654Z"} 2026-07-18T14:08:20.042654+00:00 https://vulnerability.circl.lu/sighting/1e3f8740-f28b-4769-8c90-c133e3938bcd/export 2026-09-02T11:15:20.767996+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "1e3f8740-f28b-4769-8c90-c133e3938bcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9770", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mqsncizm5p2y", "content": "TP-Link Kasa vulnerability CVE-2026-9770 (CVSS 8.6) lets local attackers intercept admin credentials on EC70 and EC71 cameras. Update firmware now.\n\n#TPLink #Kasa #IoTSecurity #CVE20269770 #InfoDisclosure", "creation_timestamp": "2026-07-17T01:53:00.317536Z"} 2026-07-17T01:53:00.317536+00:00 https://vulnerability.circl.lu/sighting/cb59c6cd-8021-4628-a0fa-1df4b43d314b/export 2026-09-02T11:15:20.768101+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "cb59c6cd-8021-4628-a0fa-1df4b43d314b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9770", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqnspns63k2e", "content": "CVE-2026-9770 - Hardcoded Cryptographic Key Information Disclosure Vulnerability on TP-Link Kasa EC70 and EC71\nCVE ID : CVE-2026-9770\n \n Published : July 15, 2026, 1:17 a.m. | 2\u00a0hours, 14\u00a0minutes ago\n \n Description : Kasa EC71 v4 and EC70 v4 firmware contains a static cryptogr...", "creation_timestamp": "2026-07-15T03:46:31.242752Z"} 2026-07-15T03:46:31.242752+00:00