cveboard RSS feed

CVE-2026-13230

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2026
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

Information Disclosure Vulnerability in Local Discovery Response in TP-Link Kasa EC70 and EC71

An information disclosure vulnerability was identified in TP-Link Kasa EC70 v4 and EC71 v4 in the local discovery mechanism, which exposes sensitive geolocation information without requiring authentication. This issue allows an attacker on the same local network to retrieve geolocation-related data through crafted responses. The vulnerability impacts confidentiality only, with no evidence of integrity of availability impact.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Kasa EC71 v4

Vendor
TP-Link Systems Inc.
Product
Kasa EC71 v4
Platforms
  • NVMP
Default status
unaffected
Kasa EC71 v4 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0affectedcustom2.4.1 Build 20260621 rel.76536UnavailableNone listed

Kasa EC70 v4

Vendor
TP-Link Systems Inc.
Product
Kasa EC70 v4
Platforms
  • NVMP
Default status
unaffected
Kasa EC70 v4 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0affectedcustom2.4.1 Build 20260621 rel.76536UnavailableNone listed