CVE-2026-76784 (GCVE-0-2026-76784)

Vulnerability from cvelistv5 – Published: 2026-08-26 17:47 – Updated: 2026-08-26 18:50
VLAI
Title
Insufficient Cryptographic Protections in Local Device Communication Protocol on Multiple TP-Link Kasa Smart Home Devices
Summary
Multiple TP-Link Kasa smart home devices contain insufficient cryptographic protections in the local device communication protocol. An adjacent network attacker may intercept, replay or forge locally exchanged control messages, potentially resulting in unauthorized device control. Successful exploitation could allow an attacker to manipulate the operational state of an affected device, resulting in unauthorized state changes, disruption of normal device functionality or a denial-of-service condition.
Severity
8.7 (High)
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
SSVC
Exploitation: none Automatable: no Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-26 18:43 UTC
CWE
  • CWE-325 - Missing Cryptographic Step
Assigner
TPLink CNA under the mitre root
CNA scorecard B 88/100 over 97 records in the last 180 days details
References
Impacted products
Vendor Product Version CPE status
TP-Link Systems Inc. HS103P3 / HS103P4 v5 Affected: 0 , < 1.1.3 Build 250908 Rel.112508 (custom)
guessed Create a notification for this product.
TP-Link Systems Inc. EP10 Affected: 0 , < 1.1.1 Build 250908 Rel.112508 (custom)
guessed Create a notification for this product.
TP-Link Systems Inc. EP25 V2 Affected: 0 , < 1.0.3 Build 240529 Rel.145252 (custom)
guessed Create a notification for this product.
TP-Link Systems Inc. HS300 V2 Affected: 0 , < 1.1.2 Build 241220 Rel.171333 (custom)
guessed Create a notification for this product.
TP-Link Systems Inc. KP303 V2 Affected: 0 , < 1.1.2 Build 241220 Rel.173321 (custom)
guessed Create a notification for this product.
TP-Link Systems Inc. EP40A Affected: 0 , < 1.1.1 Build 250908 Rel.112526 (custom)
guessed Create a notification for this product.
TP-Link Systems Inc. KP125MP2 / KP125MP4 Affected: 0 , < 1.2.5 Build 241213 Rel.172504 (custom)
guessed Create a notification for this product.
TP-Link Systems Inc. KP115 Affected: 0 , < 1.1.1 Build 250908 Rel.112945 (custom)
guessed Create a notification for this product.
TP-Link Systems Inc. KS225 Affected: 0 , < 1.1.1 Build 240626 Rel.175125 (custom)
guessed Create a notification for this product.
TP-Link Systems Inc. EP40M Affected: 0 , < 1.1.0 Build 240415 Rel.171219 (custom)
guessed Create a notification for this product.
TP-Link Systems Inc. KS205 Affected: 0 , < 1.1.1 Build 240724 Rel.105920 (custom)
guessed Create a notification for this product.
TP-Link Systems Inc. KS240 Affected: 0 , < 1.0.6 Build 240122 Rel.160100 (custom)
guessed Create a notification for this product.
TP-Link Systems Inc. ES20M Affected: 0 , < 1.1.6 Build 250522 Rel.210254 (custom)
guessed Create a notification for this product.
TP-Link Systems Inc. KS220M Affected: 0 , < 1.1.6 Build 250522 Rel.210254 (custom)
guessed Create a notification for this product.
TP-Link Systems Inc. KP200 V3 Affected: 0 , < 1.1.0 Build 250225 Rel.171724 (custom)
guessed Create a notification for this product.
TP-Link Systems Inc. HS200 V5.26 Affected: 0 , < 1.0.3 Build 240723 Rel.192622 (custom)
guessed Create a notification for this product.
TP-Link Systems Inc. HS220-LA(US) 6.6 / HS220-BL(US) 6.6 Affected: 0 , < 1.0.3 Build 240723 Rel.192630 (custom)
guessed Create a notification for this product.
TP-Link Systems Inc. HS220 V3.26 Affected: 0 , < 1.1.1 Build 240802 Rel.094131 (custom)
guessed Create a notification for this product.
TP-Link Systems Inc. HS220-LA(US) 4.6 / HS220-BL(US) 4.6 Affected: 0 , < 1.1.1 Build 240802 Rel.094142 (custom)
guessed Create a notification for this product.
TP-Link Systems Inc. KL125 Affected: 0 , < 1.1.1 Build 260710 Rel.082646 (custom)
guessed Create a notification for this product.
Credits
Priyanka Rushikesh Chaudhary (Research Scholar, CSIS Department, BITS Pilani, Hyderabad Campus, India), Rajib Ranjan Maiti (Associate Professor, CSIS Department, BITS Pilani, Hyderabad Campus, India)
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-76784",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-26T18:43:28.394552Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-26T18:50:19.860Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "HS103P3 / HS103P4 v5",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "1.1.3 Build 250908 Rel.112508",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EP10",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "1.1.1 Build 250908 Rel.112508",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EP25 V2",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "1.0.3 Build 240529 Rel.145252",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "HS300 V2",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "1.1.2 Build 241220 Rel.171333",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "KP303 V2",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "1.1.2 Build 241220 Rel.173321",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EP40A",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "1.1.1 Build 250908 Rel.112526",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "KP125MP2 / KP125MP4",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "1.2.5 Build 241213 Rel.172504",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "KP115",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "1.1.1 Build 250908 Rel.112945",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "KS225",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "1.1.1 Build 240626 Rel.175125",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EP40M",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "1.1.0 Build 240415 Rel.171219",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "KS205",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "1.1.1 Build 240724 Rel.105920",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "KS240",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "1.0.6 Build 240122 Rel.160100",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ES20M",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "1.1.6 Build 250522 Rel.210254",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "KS220M",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "1.1.6 Build 250522 Rel.210254",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "KP200 V3",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "1.1.0 Build 250225 Rel.171724",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "HS200 V5.26",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "1.0.3 Build 240723 Rel.192622",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "HS220-LA(US) 6.6 / HS220-BL(US) 6.6",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "1.0.3 Build 240723 Rel.192630",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "HS220 V3.26",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "1.1.1 Build 240802 Rel.094131",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "HS220-LA(US) 4.6 / HS220-BL(US) 4.6",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "1.1.1 Build 240802 Rel.094142",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "KL125",
          "vendor": "TP-Link Systems Inc.",
          "versions": [
            {
              "lessThan": "1.1.1 Build 260710 Rel.082646",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Priyanka Rushikesh Chaudhary (Research Scholar, CSIS Department, BITS Pilani, Hyderabad Campus, India), Rajib Ranjan Maiti (Associate Professor, CSIS Department, BITS Pilani, Hyderabad Campus, India)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eMultiple\nTP-Link Kasa smart home devices contain insufficient cryptographic protections\nin the local device communication protocol. An adjacent network attacker may\nintercept, replay or forge locally exchanged control messages, potentially\nresulting in unauthorized device control. \u003c/p\u003e\u003cp\u003e\n\n\u003c/p\u003e\u003cp\u003eSuccessful\nexploitation could allow an attacker to manipulate the operational state of an\naffected device, resulting in unauthorized state changes, disruption of normal\ndevice functionality or a denial-of-service condition.\u003c/p\u003e"
            }
          ],
          "value": "Multiple\nTP-Link Kasa smart home devices contain insufficient cryptographic protections\nin the local device communication protocol. An adjacent network attacker may\nintercept, replay or forge locally exchanged control messages, potentially\nresulting in unauthorized device control. \n\n\n\n\n\n\n\n\n\nSuccessful\nexploitation could allow an attacker to manipulate the operational state of an\naffected device, resulting in unauthorized state changes, disruption of normal\ndevice functionality or a denial-of-service condition."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-594",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-594 Traffic Injection"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "ADJACENT",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-325",
              "description": "CWE-325: Missing Cryptographic Step",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-26T17:47:54.278Z",
        "orgId": "f23511db-6c3e-4e32-a477-6aa17d310630",
        "shortName": "TPLink"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://www.tp-link.com/us/support/download/"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://www.tp-link.com/en/support/download/"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://www.tp-link.com/in/support/download/"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.tp-link.com/us/support/faq/5267/"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Insufficient Cryptographic Protections in Local Device Communication Protocol on Multiple TP-Link Kasa Smart Home Devices",
      "x_generator": {
        "engine": "Vulnogram 1.0.4"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f23511db-6c3e-4e32-a477-6aa17d310630",
    "assignerShortName": "TPLink",
    "cveId": "CVE-2026-76784",
    "datePublished": "2026-08-26T17:47:54.278Z",
    "dateReserved": "2026-08-19T17:32:21.874Z",
    "dateUpdated": "2026-08-26T18:50:19.860Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-76784",
      "date": "2026-10-16",
      "epss": "0.00197",
      "percentile": "0.08766"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "HS103P3 / HS103P4 v5",
                "vendor": "TP-Link Systems Inc.",
                "versions": [
                  {
                    "lessThan": "1.1.3 Build 250908 Rel.112508",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "EP10",
                "vendor": "TP-Link Systems Inc.",
                "versions": [
                  {
                    "lessThan": "1.1.1 Build 250908 Rel.112508",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "EP25 V2",
                "vendor": "TP-Link Systems Inc.",
                "versions": [
                  {
                    "lessThan": "1.0.3 Build 240529 Rel.145252",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "HS300 V2",
                "vendor": "TP-Link Systems Inc.",
                "versions": [
                  {
                    "lessThan": "1.1.2 Build 241220 Rel.171333",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "KP303 V2",
                "vendor": "TP-Link Systems Inc.",
                "versions": [
                  {
                    "lessThan": "1.1.2 Build 241220 Rel.173321",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "EP40A",
                "vendor": "TP-Link Systems Inc.",
                "versions": [
                  {
                    "lessThan": "1.1.1 Build 250908 Rel.112526",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "KP125MP2 / KP125MP4",
                "vendor": "TP-Link Systems Inc.",
                "versions": [
                  {
                    "lessThan": "1.2.5 Build 241213 Rel.172504",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "KP115",
                "vendor": "TP-Link Systems Inc.",
                "versions": [
                  {
                    "lessThan": "1.1.1 Build 250908 Rel.112945",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "KS225",
                "vendor": "TP-Link Systems Inc.",
                "versions": [
                  {
                    "lessThan": "1.1.1 Build 240626 Rel.175125",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "EP40M",
                "vendor": "TP-Link Systems Inc.",
                "versions": [
                  {
                    "lessThan": "1.1.0 Build 240415 Rel.171219",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "KS205",
                "vendor": "TP-Link Systems Inc.",
                "versions": [
                  {
                    "lessThan": "1.1.1 Build 240724 Rel.105920",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "KS240",
                "vendor": "TP-Link Systems Inc.",
                "versions": [
                  {
                    "lessThan": "1.0.6 Build 240122 Rel.160100",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "ES20M",
                "vendor": "TP-Link Systems Inc.",
                "versions": [
                  {
                    "lessThan": "1.1.6 Build 250522 Rel.210254",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "KS220M",
                "vendor": "TP-Link Systems Inc.",
                "versions": [
                  {
                    "lessThan": "1.1.6 Build 250522 Rel.210254",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "KP200 V3",
                "vendor": "TP-Link Systems Inc.",
                "versions": [
                  {
                    "lessThan": "1.1.0 Build 250225 Rel.171724",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "HS200 V5.26",
                "vendor": "TP-Link Systems Inc.",
                "versions": [
                  {
                    "lessThan": "1.0.3 Build 240723 Rel.192622",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "HS220-LA(US) 6.6 / HS220-BL(US) 6.6",
                "vendor": "TP-Link Systems Inc.",
                "versions": [
                  {
                    "lessThan": "1.0.3 Build 240723 Rel.192630",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "HS220 V3.26",
                "vendor": "TP-Link Systems Inc.",
                "versions": [
                  {
                    "lessThan": "1.1.1 Build 240802 Rel.094131",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "HS220-LA(US) 4.6 / HS220-BL(US) 4.6",
                "vendor": "TP-Link Systems Inc.",
                "versions": [
                  {
                    "lessThan": "1.1.1 Build 240802 Rel.094142",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "KL125",
                "vendor": "TP-Link Systems Inc.",
                "versions": [
                  {
                    "lessThan": "1.1.1 Build 260710 Rel.082646",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              }
            ],
            "source": "f23511db-6c3e-4e32-a477-6aa17d310630"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Multiple\nTP-Link Kasa smart home devices contain insufficient cryptographic protections\nin the local device communication protocol. An adjacent network attacker may\nintercept, replay or forge locally exchanged control messages, potentially\nresulting in unauthorized device control. \n\n\n\n\n\n\n\n\n\nSuccessful\nexploitation could allow an attacker to manipulate the operational state of an\naffected device, resulting in unauthorized state changes, disruption of normal\ndevice functionality or a denial-of-service condition."
          }
        ],
        "id": "CVE-2026-76784",
        "lastModified": "2026-08-28T19:02:53.760",
        "metrics": {
          "cvssMetricV40": [
            {
              "cvssData": {
                "Automatable": "NOT_DEFINED",
                "Recovery": "NOT_DEFINED",
                "Safety": "NOT_DEFINED",
                "attackComplexity": "LOW",
                "attackRequirements": "NONE",
                "attackVector": "ADJACENT",
                "availabilityRequirement": "NOT_DEFINED",
                "baseScore": 8.7,
                "baseSeverity": "HIGH",
                "confidentialityRequirement": "NOT_DEFINED",
                "exploitMaturity": "NOT_DEFINED",
                "integrityRequirement": "NOT_DEFINED",
                "modifiedAttackComplexity": "NOT_DEFINED",
                "modifiedAttackRequirements": "NOT_DEFINED",
                "modifiedAttackVector": "NOT_DEFINED",
                "modifiedPrivilegesRequired": "NOT_DEFINED",
                "modifiedSubAvailabilityImpact": "NOT_DEFINED",
                "modifiedSubConfidentialityImpact": "NOT_DEFINED",
                "modifiedSubIntegrityImpact": "NOT_DEFINED",
                "modifiedUserInteraction": "NOT_DEFINED",
                "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
                "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
                "modifiedVulnIntegrityImpact": "NOT_DEFINED",
                "privilegesRequired": "NONE",
                "providerUrgency": "NOT_DEFINED",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "NONE",
                "valueDensity": "NOT_DEFINED",
                "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
                "version": "4.0",
                "vulnAvailabilityImpact": "HIGH",
                "vulnConfidentialityImpact": "HIGH",
                "vulnIntegrityImpact": "HIGH",
                "vulnerabilityResponseEffort": "NOT_DEFINED"
              },
              "source": "f23511db-6c3e-4e32-a477-6aa17d310630",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2026-76784",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-26T18:43:28.394552Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2026-08-26T18:17:01.903",
        "references": [
          {
            "source": "f23511db-6c3e-4e32-a477-6aa17d310630",
            "url": "https://www.tp-link.com/en/support/download/"
          },
          {
            "source": "f23511db-6c3e-4e32-a477-6aa17d310630",
            "url": "https://www.tp-link.com/in/support/download/"
          },
          {
            "source": "f23511db-6c3e-4e32-a477-6aa17d310630",
            "url": "https://www.tp-link.com/us/support/download/"
          },
          {
            "source": "f23511db-6c3e-4e32-a477-6aa17d310630",
            "url": "https://www.tp-link.com/us/support/faq/5267/"
          }
        ],
        "sourceIdentifier": "f23511db-6c3e-4e32-a477-6aa17d310630",
        "vulnStatus": "Awaiting Analysis",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-325"
              }
            ],
            "source": "f23511db-6c3e-4e32-a477-6aa17d310630",
            "type": "Secondary"
          }
        ]
      }
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-76784",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-08-26T18:43:28.394552Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-08-26T18:50:12.831Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "HS103P3 / HS103P4 v5",
              "vendor": "TP-Link Systems Inc.",
              "versions": [
                {
                  "lessThan": "1.1.3 Build 250908 Rel.112508",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "EP10",
              "vendor": "TP-Link Systems Inc.",
              "versions": [
                {
                  "lessThan": "1.1.1 Build 250908 Rel.112508",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "EP25 V2",
              "vendor": "TP-Link Systems Inc.",
              "versions": [
                {
                  "lessThan": "1.0.3 Build 240529 Rel.145252",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "HS300 V2",
              "vendor": "TP-Link Systems Inc.",
              "versions": [
                {
                  "lessThan": "1.1.2 Build 241220 Rel.171333",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "KP303 V2",
              "vendor": "TP-Link Systems Inc.",
              "versions": [
                {
                  "lessThan": "1.1.2 Build 241220 Rel.173321",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "EP40A",
              "vendor": "TP-Link Systems Inc.",
              "versions": [
                {
                  "lessThan": "1.1.1 Build 250908 Rel.112526",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "KP125MP2 / KP125MP4",
              "vendor": "TP-Link Systems Inc.",
              "versions": [
                {
                  "lessThan": "1.2.5 Build 241213 Rel.172504",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "KP115",
              "vendor": "TP-Link Systems Inc.",
              "versions": [
                {
                  "lessThan": "1.1.1 Build 250908 Rel.112945",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "KS225",
              "vendor": "TP-Link Systems Inc.",
              "versions": [
                {
                  "lessThan": "1.1.1 Build 240626 Rel.175125",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "EP40M",
              "vendor": "TP-Link Systems Inc.",
              "versions": [
                {
                  "lessThan": "1.1.0 Build 240415 Rel.171219",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "KS205",
              "vendor": "TP-Link Systems Inc.",
              "versions": [
                {
                  "lessThan": "1.1.1 Build 240724 Rel.105920",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "KS240",
              "vendor": "TP-Link Systems Inc.",
              "versions": [
                {
                  "lessThan": "1.0.6 Build 240122 Rel.160100",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "ES20M",
              "vendor": "TP-Link Systems Inc.",
              "versions": [
                {
                  "lessThan": "1.1.6 Build 250522 Rel.210254",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "KS220M",
              "vendor": "TP-Link Systems Inc.",
              "versions": [
                {
                  "lessThan": "1.1.6 Build 250522 Rel.210254",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "KP200 V3",
              "vendor": "TP-Link Systems Inc.",
              "versions": [
                {
                  "lessThan": "1.1.0 Build 250225 Rel.171724",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "HS200 V5.26",
              "vendor": "TP-Link Systems Inc.",
              "versions": [
                {
                  "lessThan": "1.0.3 Build 240723 Rel.192622",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "HS220-LA(US) 6.6 / HS220-BL(US) 6.6",
              "vendor": "TP-Link Systems Inc.",
              "versions": [
                {
                  "lessThan": "1.0.3 Build 240723 Rel.192630",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "HS220 V3.26",
              "vendor": "TP-Link Systems Inc.",
              "versions": [
                {
                  "lessThan": "1.1.1 Build 240802 Rel.094131",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "HS220-LA(US) 4.6 / HS220-BL(US) 4.6",
              "vendor": "TP-Link Systems Inc.",
              "versions": [
                {
                  "lessThan": "1.1.1 Build 240802 Rel.094142",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "KL125",
              "vendor": "TP-Link Systems Inc.",
              "versions": [
                {
                  "lessThan": "1.1.1 Build 260710 Rel.082646",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "finder",
              "value": "Priyanka Rushikesh Chaudhary (Research Scholar, CSIS Department, BITS Pilani, Hyderabad Campus, India), Rajib Ranjan Maiti (Associate Professor, CSIS Department, BITS Pilani, Hyderabad Campus, India)"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cp\u003eMultiple\nTP-Link Kasa smart home devices contain insufficient cryptographic protections\nin the local device communication protocol. An adjacent network attacker may\nintercept, replay or forge locally exchanged control messages, potentially\nresulting in unauthorized device control. \u003c/p\u003e\u003cp\u003e\n\n\u003c/p\u003e\u003cp\u003eSuccessful\nexploitation could allow an attacker to manipulate the operational state of an\naffected device, resulting in unauthorized state changes, disruption of normal\ndevice functionality or a denial-of-service condition.\u003c/p\u003e"
                }
              ],
              "value": "Multiple\nTP-Link Kasa smart home devices contain insufficient cryptographic protections\nin the local device communication protocol. An adjacent network attacker may\nintercept, replay or forge locally exchanged control messages, potentially\nresulting in unauthorized device control. \n\n\n\n\n\n\n\n\n\nSuccessful\nexploitation could allow an attacker to manipulate the operational state of an\naffected device, resulting in unauthorized state changes, disruption of normal\ndevice functionality or a denial-of-service condition."
            }
          ],
          "impacts": [
            {
              "capecId": "CAPEC-594",
              "descriptions": [
                {
                  "lang": "en",
                  "value": "CAPEC-594 Traffic Injection"
                }
              ]
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "Automatable": "NOT_DEFINED",
                "Recovery": "NOT_DEFINED",
                "Safety": "NOT_DEFINED",
                "attackComplexity": "LOW",
                "attackRequirements": "NONE",
                "attackVector": "ADJACENT",
                "baseScore": 8.7,
                "baseSeverity": "HIGH",
                "exploitMaturity": "NOT_DEFINED",
                "privilegesRequired": "NONE",
                "providerUrgency": "NOT_DEFINED",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "NONE",
                "valueDensity": "NOT_DEFINED",
                "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
                "version": "4.0",
                "vulnAvailabilityImpact": "HIGH",
                "vulnConfidentialityImpact": "HIGH",
                "vulnIntegrityImpact": "HIGH",
                "vulnerabilityResponseEffort": "NOT_DEFINED"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-325",
                  "description": "CWE-325: Missing Cryptographic Step",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-08-26T17:47:54.278Z",
            "orgId": "f23511db-6c3e-4e32-a477-6aa17d310630",
            "shortName": "TPLink"
          },
          "references": [
            {
              "tags": [
                "patch"
              ],
              "url": "https://www.tp-link.com/us/support/download/"
            },
            {
              "tags": [
                "patch"
              ],
              "url": "https://www.tp-link.com/en/support/download/"
            },
            {
              "tags": [
                "patch"
              ],
              "url": "https://www.tp-link.com/in/support/download/"
            },
            {
              "tags": [
                "vendor-advisory"
              ],
              "url": "https://www.tp-link.com/us/support/faq/5267/"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "title": "Insufficient Cryptographic Protections in Local Device Communication Protocol on Multiple TP-Link Kasa Smart Home Devices",
          "x_generator": {
            "engine": "Vulnogram 1.0.4"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "f23511db-6c3e-4e32-a477-6aa17d310630",
        "assignerShortName": "TPLink",
        "cveId": "CVE-2026-76784",
        "datePublished": "2026-08-26T17:47:54.278Z",
        "dateReserved": "2026-08-19T17:32:21.874Z",
        "dateUpdated": "2026-08-26T18:50:19.860Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON

Loading timeline…




    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.