Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 275/275 feeds/APIs · 469/469 docs · 7/9 advisories · checked 01:33 UTC Customize Public modeDiscuss ChangeIntel on Discord

Improper Authentication and Credential Exposure in Multiple TP-Link Kasa Devices

Exact source revision recorded 23 Oct 2026 15:48:27 UTC. It does not establish the source's current position. Latest evidence.

cve-program · CVE-2026-108473

Published

HS103 v5

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "TP-Link Systems Inc.",
                    "product": "HS103 v5",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThan": "1.1.3 Build 250908 Rel.112508",
                            "versionType": "custom"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

EP10 v1

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "TP-Link Systems Inc.",
                    "product": "EP10 v1",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThan": "1.1.1 Build 250908 Rel.112508",
                            "versionType": "custom"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

EP40 v1

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "TP-Link Systems Inc.",
                    "product": "EP40 v1",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThan": "1.1.0 Build 250225 Rel.171723",
                            "versionType": "custom"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

HS200 v5

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "TP-Link Systems Inc.",
                    "product": "HS200 v5",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThan": "1.1.2 Build 241220 Rel.165559",
                            "versionType": "custom"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

KP401 v1

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "TP-Link Systems Inc.",
                    "product": "KP401 v1",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThan": "1.1.2 Build 241223 Rel.094434",
                            "versionType": "custom"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

KS230 KIT v2

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "TP-Link Systems Inc.",
                    "product": "KS230 KIT v2",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThan": "1.1.4 Build 241223 Rel.105830",
                            "versionType": "custom"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

KP405 v1

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "TP-Link Systems Inc.",
                    "product": "KP405 v1",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThan": "1.1.0 Build 250225 Rel.174632",
                            "versionType": "custom"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

HS220 v3

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "TP-Link Systems Inc.",
                    "product": "HS220 v3",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThan": "1.1.4 Build 241220 Rel.171050",
                            "versionType": "custom"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

KP115 v1

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "TP-Link Systems Inc.",
                    "product": "KP115 v1",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThan": "1.1.1 Build 250908 Rel.112945",
                            "versionType": "custom"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

HS210 v3

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "TP-Link Systems Inc.",
                    "product": "HS210 v3",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThan": "1.1.0 Build 250225 Rel.163425",
                            "versionType": "custom"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

HS300 v2

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "TP-Link Systems Inc.",
                    "product": "HS300 v2",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThan": "1.1.2 Build 241220 Rel.171333",
                            "versionType": "custom"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

KP200 v3

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "TP-Link Systems Inc.",
                    "product": "KP200 v3",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThan": "1.1.0 Build 250225 Rel.171724",
                            "versionType": "custom"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

KP303 v2

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "TP-Link Systems Inc.",
                    "product": "KP303 v2",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThan": "1.1.2 Build 241220 Rel.173321",
                            "versionType": "custom"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

KS200 v1

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "TP-Link Systems Inc.",
                    "product": "KS200 v1",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThan": "1.1.2 Build 241223 Rel.103857",
                            "versionType": "custom"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

EP40A v1

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "TP-Link Systems Inc.",
                    "product": "EP40A v1",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThan": "1.1.1 Build 250908 Rel.112526",
                            "versionType": "custom"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

KS220 v1

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "TP-Link Systems Inc.",
                    "product": "KS220 v1",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThan": "1.1.3 Build 241223 Rel.105515",
                            "versionType": "custom"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

KS200M v1

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "TP-Link Systems Inc.",
                    "product": "KS200M v1",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThan": "1.1.4 Build 241223 Rel.104700",
                            "versionType": "custom"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

ES20M v1

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "TP-Link Systems Inc.",
                    "product": "ES20M v1",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThan": "1.1.6 Build 250522 Rel.210254",
                            "versionType": "custom"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

KS220M v1

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "TP-Link Systems Inc.",
                    "product": "KS220M v1",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThan": "1.1.6 Build 250522 Rel.210254",
                            "versionType": "custom"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

KP400 v3

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "TP-Link Systems Inc.",
                    "product": "KP400 v3",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThan": "1.1.0 Build 250225 Rel.171723",
                            "versionType": "custom"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

KL125 v4

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "TP-Link Systems Inc.",
                    "product": "KL125 v4",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThan": "1.1.1 Build 260710 Rel.082646",
                            "versionType": "custom"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

KL135 v2

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "TP-Link Systems Inc.",
                    "product": "KL135 v2",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThan": "1.1.1 Build 260710 Rel.082646",
                            "versionType": "custom"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

KL110 v4

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "TP-Link Systems Inc.",
                    "product": "KL110 v4",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThan": "1.1.1 Build 260710 Rel.082646",
                            "versionType": "custom"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

KL420L5 v1

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "TP-Link Systems Inc.",
                    "product": "KL420L5 v1",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThan": "1.4.2 Build 260605 Rel.035033",
                            "versionType": "custom"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

Original source record · Cite this exact observation · Complete original publisher JSON

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 10 Nov 01:33 UTC · 275 of 275 readable · 273 fully read · documentation 469/469 current