<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 02 Sep 2026 11:15:20 +0000</lastBuildDate>
    <item>
      <title>66a5e6e2-dd90-4aa5-82e0-ee9857e115e2</title>
      <link>https://vulnerability.circl.lu/sighting/66a5e6e2-dd90-4aa5-82e0-ee9857e115e2/export</link>
      <description>{"uuid": "66a5e6e2-dd90-4aa5-82e0-ee9857e115e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9770", "type": "seen", "source": "https://t.me/pphm_HackerNews/2133", "content": "\ud83d\udd34 TP-Link Kasa Camera Flaws Let Attackers Steal Admin Credentials and Geolocation Data\n\nTP-Link has revealed several serious vulnerabilities affecting its Kasa EC70 and EC71 smart camera models, which could expose users to credential theft and geolocation data leakage.\n\nThese vulnerabilities are CVE-2026-9770 and CVE-2026-13230 and specifically affect version 4 of both devices. Attackers with access to the same local network could exploit these flaws, raising concerns about lateral movement risks in both home and enterprise environments.", "creation_timestamp": "2026-08-23T00:00:44.109531Z"}</description>
      <content:encoded>{"uuid": "66a5e6e2-dd90-4aa5-82e0-ee9857e115e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9770", "type": "seen", "source": "https://t.me/pphm_HackerNews/2133", "content": "\ud83d\udd34 TP-Link Kasa Camera Flaws Let Attackers Steal Admin Credentials and Geolocation Data\n\nTP-Link has revealed several serious vulnerabilities affecting its Kasa EC70 and EC71 smart camera models, which could expose users to credential theft and geolocation data leakage.\n\nThese vulnerabilities are CVE-2026-9770 and CVE-2026-13230 and specifically affect version 4 of both devices. Attackers with access to the same local network could exploit these flaws, raising concerns about lateral movement risks in both home and enterprise environments.", "creation_timestamp": "2026-08-23T00:00:44.109531Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/66a5e6e2-dd90-4aa5-82e0-ee9857e115e2/export</guid>
      <pubDate>Sun, 23 Aug 2026 00:00:44 +0000</pubDate>
    </item>
    <item>
      <title>dfea5b80-6c91-4d24-8ecd-eb861f8fbade</title>
      <link>https://vulnerability.circl.lu/sighting/dfea5b80-6c91-4d24-8ecd-eb861f8fbade/export</link>
      <description>{"uuid": "dfea5b80-6c91-4d24-8ecd-eb861f8fbade", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9770", "type": "seen", "source": "https://t.me/pphm_HackerNews/2133", "content": "\ud83d\udd34 TP-Link Kasa Camera Flaws Let Attackers Steal Admin Credentials and Geolocation Data\n\nTP-Link has revealed several serious vulnerabilities affecting its Kasa EC70 and EC71 smart camera models, which could expose users to credential theft and geolocation data leakage.\n\nThese vulnerabilities are CVE-2026-9770 and CVE-2026-13230 and specifically affect version 4 of both devices. Attackers with access to the same local network could exploit these flaws, raising concerns about lateral movement risks in both home and enterprise environments.", "creation_timestamp": "2026-08-22T00:00:12.248375Z"}</description>
      <content:encoded>{"uuid": "dfea5b80-6c91-4d24-8ecd-eb861f8fbade", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9770", "type": "seen", "source": "https://t.me/pphm_HackerNews/2133", "content": "\ud83d\udd34 TP-Link Kasa Camera Flaws Let Attackers Steal Admin Credentials and Geolocation Data\n\nTP-Link has revealed several serious vulnerabilities affecting its Kasa EC70 and EC71 smart camera models, which could expose users to credential theft and geolocation data leakage.\n\nThese vulnerabilities are CVE-2026-9770 and CVE-2026-13230 and specifically affect version 4 of both devices. Attackers with access to the same local network could exploit these flaws, raising concerns about lateral movement risks in both home and enterprise environments.", "creation_timestamp": "2026-08-22T00:00:12.248375Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/dfea5b80-6c91-4d24-8ecd-eb861f8fbade/export</guid>
      <pubDate>Sat, 22 Aug 2026 00:00:12 +0000</pubDate>
    </item>
    <item>
      <title>b56c8d1b-7a2b-42bc-8e5c-090a803246a3</title>
      <link>https://vulnerability.circl.lu/sighting/b56c8d1b-7a2b-42bc-8e5c-090a803246a3/export</link>
      <description>{"uuid": "b56c8d1b-7a2b-42bc-8e5c-090a803246a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9770", "type": "seen", "source": "https://t.me/pphm_HackerNews/2133", "content": "\ud83d\udd34 TP-Link Kasa Camera Flaws Let Attackers Steal Admin Credentials and Geolocation Data\n\nTP-Link has revealed several serious vulnerabilities affecting its Kasa EC70 and EC71 smart camera models, which could expose users to credential theft and geolocation data leakage.\n\nThese vulnerabilities are CVE-2026-9770 and CVE-2026-13230 and specifically affect version 4 of both devices. Attackers with access to the same local network could exploit these flaws, raising concerns about lateral movement risks in both home and enterprise environments.", "creation_timestamp": "2026-08-21T23:00:08.772600Z"}</description>
      <content:encoded>{"uuid": "b56c8d1b-7a2b-42bc-8e5c-090a803246a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9770", "type": "seen", "source": "https://t.me/pphm_HackerNews/2133", "content": "\ud83d\udd34 TP-Link Kasa Camera Flaws Let Attackers Steal Admin Credentials and Geolocation Data\n\nTP-Link has revealed several serious vulnerabilities affecting its Kasa EC70 and EC71 smart camera models, which could expose users to credential theft and geolocation data leakage.\n\nThese vulnerabilities are CVE-2026-9770 and CVE-2026-13230 and specifically affect version 4 of both devices. Attackers with access to the same local network could exploit these flaws, raising concerns about lateral movement risks in both home and enterprise environments.", "creation_timestamp": "2026-08-21T23:00:08.772600Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b56c8d1b-7a2b-42bc-8e5c-090a803246a3/export</guid>
      <pubDate>Fri, 21 Aug 2026 23:00:08 +0000</pubDate>
    </item>
    <item>
      <title>1726c430-9aa0-4868-84b4-41023b616ad0</title>
      <link>https://vulnerability.circl.lu/sighting/1726c430-9aa0-4868-84b4-41023b616ad0/export</link>
      <description>{"uuid": "1726c430-9aa0-4868-84b4-41023b616ad0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9770", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrmxl5alzs23", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-9770: \u0423\u0433\u0440\u043e\u0437\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 TP-Link Kasa EC70 \u0438 EC71\n\n\n\nhttps://kripta.biz/posts/CD28DC2B-39C2-4716-9F2F-75B702898EEE", "creation_timestamp": "2026-07-27T13:06:00.592559Z"}</description>
      <content:encoded>{"uuid": "1726c430-9aa0-4868-84b4-41023b616ad0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9770", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrmxl5alzs23", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-9770: \u0423\u0433\u0440\u043e\u0437\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 TP-Link Kasa EC70 \u0438 EC71\n\n\n\nhttps://kripta.biz/posts/CD28DC2B-39C2-4716-9F2F-75B702898EEE", "creation_timestamp": "2026-07-27T13:06:00.592559Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1726c430-9aa0-4868-84b4-41023b616ad0/export</guid>
      <pubDate>Mon, 27 Jul 2026 13:06:00 +0000</pubDate>
    </item>
    <item>
      <title>da2d78a2-9b8d-4002-9be9-d6e713cf9693</title>
      <link>https://vulnerability.circl.lu/sighting/da2d78a2-9b8d-4002-9be9-d6e713cf9693/export</link>
      <description>{"uuid": "da2d78a2-9b8d-4002-9be9-d6e713cf9693", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9770", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mr2lfedbzj2g", "content": "A TP-Link Kasa vulnerability (CVE-2026-9770) lets local attackers steal admin credentials via a hardcoded key. Patch your EC70 and EC71 firmware now.\n\n#TPLink #Kasa #CVE20269770 #IoTSecurity #Cameras #ManInTheMiddle", "creation_timestamp": "2026-07-20T05:40:06.436036Z"}</description>
      <content:encoded>{"uuid": "da2d78a2-9b8d-4002-9be9-d6e713cf9693", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9770", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mr2lfedbzj2g", "content": "A TP-Link Kasa vulnerability (CVE-2026-9770) lets local attackers steal admin credentials via a hardcoded key. Patch your EC70 and EC71 firmware now.\n\n#TPLink #Kasa #CVE20269770 #IoTSecurity #Cameras #ManInTheMiddle", "creation_timestamp": "2026-07-20T05:40:06.436036Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/da2d78a2-9b8d-4002-9be9-d6e713cf9693/export</guid>
      <pubDate>Mon, 20 Jul 2026 05:40:06 +0000</pubDate>
    </item>
    <item>
      <title>dfc063fc-6887-438b-ad81-caea8523024d</title>
      <link>https://vulnerability.circl.lu/sighting/dfc063fc-6887-438b-ad81-caea8523024d/export</link>
      <description>{"uuid": "dfc063fc-6887-438b-ad81-caea8523024d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9770", "type": "seen", "source": "https://bsky.app/profile/lu1tr0n.bsky.social/post/3mqwguc4uw52j", "content": "Kasa EC71: CVE-2026-9770 y el GPS sin login\n\nhttps://elsolitario.org/2026/07/18/kasa-ec71-vulnerabilidades-iot-firmware/?utm_source=bluesky&amp;amp;utm_medium=social&amp;amp;utm_campaign=programacion\n\n#Ciberseguridad #InfoSec #Security", "creation_timestamp": "2026-07-18T14:08:20.042654Z"}</description>
      <content:encoded>{"uuid": "dfc063fc-6887-438b-ad81-caea8523024d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9770", "type": "seen", "source": "https://bsky.app/profile/lu1tr0n.bsky.social/post/3mqwguc4uw52j", "content": "Kasa EC71: CVE-2026-9770 y el GPS sin login\n\nhttps://elsolitario.org/2026/07/18/kasa-ec71-vulnerabilidades-iot-firmware/?utm_source=bluesky&amp;amp;utm_medium=social&amp;amp;utm_campaign=programacion\n\n#Ciberseguridad #InfoSec #Security", "creation_timestamp": "2026-07-18T14:08:20.042654Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/dfc063fc-6887-438b-ad81-caea8523024d/export</guid>
      <pubDate>Sat, 18 Jul 2026 14:08:20 +0000</pubDate>
    </item>
    <item>
      <title>1e3f8740-f28b-4769-8c90-c133e3938bcd</title>
      <link>https://vulnerability.circl.lu/sighting/1e3f8740-f28b-4769-8c90-c133e3938bcd/export</link>
      <description>{"uuid": "1e3f8740-f28b-4769-8c90-c133e3938bcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9770", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mqsncizm5p2y", "content": "TP-Link Kasa vulnerability CVE-2026-9770 (CVSS 8.6) lets local attackers intercept admin credentials on EC70 and EC71 cameras. Update firmware now.\n\n#TPLink #Kasa #IoTSecurity #CVE20269770 #InfoDisclosure", "creation_timestamp": "2026-07-17T01:53:00.317536Z"}</description>
      <content:encoded>{"uuid": "1e3f8740-f28b-4769-8c90-c133e3938bcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9770", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mqsncizm5p2y", "content": "TP-Link Kasa vulnerability CVE-2026-9770 (CVSS 8.6) lets local attackers intercept admin credentials on EC70 and EC71 cameras. Update firmware now.\n\n#TPLink #Kasa #IoTSecurity #CVE20269770 #InfoDisclosure", "creation_timestamp": "2026-07-17T01:53:00.317536Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1e3f8740-f28b-4769-8c90-c133e3938bcd/export</guid>
      <pubDate>Fri, 17 Jul 2026 01:53:00 +0000</pubDate>
    </item>
    <item>
      <title>cb59c6cd-8021-4628-a0fa-1df4b43d314b</title>
      <link>https://vulnerability.circl.lu/sighting/cb59c6cd-8021-4628-a0fa-1df4b43d314b/export</link>
      <description>{"uuid": "cb59c6cd-8021-4628-a0fa-1df4b43d314b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9770", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqnspns63k2e", "content": "CVE-2026-9770 - Hardcoded Cryptographic Key Information Disclosure Vulnerability on TP-Link Kasa EC70 and EC71\nCVE ID : CVE-2026-9770\n \n Published : July 15, 2026, 1:17 a.m. | 2\u00a0hours, 14\u00a0minutes ago\n \n Description : Kasa EC71 v4 and EC70 v4 firmware contains a static cryptogr...", "creation_timestamp": "2026-07-15T03:46:31.242752Z"}</description>
      <content:encoded>{"uuid": "cb59c6cd-8021-4628-a0fa-1df4b43d314b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9770", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqnspns63k2e", "content": "CVE-2026-9770 - Hardcoded Cryptographic Key Information Disclosure Vulnerability on TP-Link Kasa EC70 and EC71\nCVE ID : CVE-2026-9770\n \n Published : July 15, 2026, 1:17 a.m. | 2\u00a0hours, 14\u00a0minutes ago\n \n Description : Kasa EC71 v4 and EC70 v4 firmware contains a static cryptogr...", "creation_timestamp": "2026-07-15T03:46:31.242752Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/cb59c6cd-8021-4628-a0fa-1df4b43d314b/export</guid>
      <pubDate>Wed, 15 Jul 2026 03:46:31 +0000</pubDate>
    </item>
  </channel>
</rss>
