CVE-2026-13230Disclosure(tp-link / kasa_ec70)

LOWCVSS 6.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch tp-link kasa_ec70 systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

An information disclosure vulnerability was identified in TP-Link Kasa EC70 v4 and EC71 v4 in the local discovery mechanism, which exposes sensitive geolocation information without requiring authentication. This issue allows an attacker on the same local network to retrieve geolocation-related data through crafted responses. The vulnerability impacts confidentiality only, with no evidence of integrity of availability impact.

tp-link CVEs Back to dashboard

1.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://www.tp-link.com/us/support/faq/5192/

Other references

Weakness type (CWE)

CWE-200

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

kasa_ec70
kasa_ec70_firmware
kasa_ec71
kasa_ec71_firmware

Threat summary

Patch or workaround signal is available
5 mentions across 3 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 2 signals
Technical details provided in 5 signals
Disclosure: 2 classified signals
General: 1 classified signal
Peaked 2d ago at 2 mentions (2026-07-15); latest day: 1
5 total mentions across 3 days

Affected systems

Vendors

tp-link

Products

kasa_ec70kasa_ec70_firmwarekasa_ec71kasa_ec71_firmware

1 version affected across 4 products

Deep dive

Activity timeline5 mentions / 3d

Signal classification3 categories

Disclosure

240.0%

Patch

240.0%

General

120.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-07-15	2	Disclosure2
2026-07-17	2	Patch2
2026-07-20	1	General1

Full discourse5 posts

elhacker.NET@elhackernet89d
Patch
Vulnerabilidad en cámaras TP-Link permite ataques MitM TP-Link ha lanzado actualizaciones de seguridad para corregir dos vulnerabilidades en sus cámaras inteligentes Kasa EC70 v4 y EC71 v4 CVE-2026-9770 y CVE-2026-13230 https://blog.elhacker.net/2026/07/vulnerabilidad-en-camaras-tp-link.html
Post summary
TP‑Link cameras Kasa EC70 v4/EC71 v4 suffer MitM vulnerabilities (CVE‑2026‑9770 & CVE‑2026‑13230), and the vendor has issued security updates to address them.
014039114.5K
141.7K followersView on X
Хабр@habr_com87d
General
5/ Вторая уязвимость, CVE-2026-13230, скромнее — 5,3 балла. Механизм обнаружения камеры отвечает на запросы без всякой проверки, поэтому чужой в сети может вытащить данные геолокации устройства. Пароль и клики жертвы не требуются.
Post summary
CVE-2026-13230 permits unauthenticated access to device geolocation via camera discovery, but no PoC, exploit, patch, or evidence of active exploitation is mentioned.
10010196
381.5K followersView on X
TECHEPAGES@techepages90d
Patch
📷 TP-Link patches two flaws in Kasa EC70/EC71 v4 smart cameras that could enable MitM attacks on local networks. 🔹 CVE-2026-9770 (CVSS 8.6): hardcoded crypto key exposes admin traffic 🔹 CVE-2026-13230 (CVSS 5.3): discovery service leaks geolocation data 🔹 Fixed in firmware 2.4.0/2.4.1 — update via Kasa app 🔹 Until patched, isolate cameras on a separate IoT network
Post summary
TP‑Link released firmware updates to fix two CVEs that could allow local MitM attacks; users should update their devices or isolate them on a separate network.
00000108
24 followersView on X
Infoflowcloud@infoflowcloud92d
Disclosure
🚨*CVE* CVE-2026-13230 An information disclosure vulnerability was identified in TP-Link Kasa EC70 v4 and EC71 v4 in the local discovery mechanism, which exposes sensitive geolocation infor… https://www.cve.org/CVERecord?id=CVE-2026-13230 ----- Traducción: CVE-2026-13230 Se … http://infoflow.cloud`
Post summary
The tweet announces a new information‑disclosure vulnerability (CVE‑2026‑13230) affecting TP‑Link Kasa EC70/EC71, noting the exposure of geolocation data, but offers no PoC, exploit, patch, or evidence of active exploitation.
0000042
92 followersView on X
CVE@CVEnew92d
Disclosure
CVE-2026-13230 An information disclosure vulnerability was identified in TP-Link Kasa EC70 v4 and EC71 v4 in the local discovery mechanism, which exposes sensitive geolocation infor… https://www.cve.org/CVERecord?id=CVE-2026-13230
Post summary
The statement announces the discovery of a new information disclosure vulnerability (CVE‑2026‑13230) affecting TP‑Link Kasa devices, noting that sensitive geolocation data is exposed via local discovery.
00000422
57.8K followersView on X

CPE platform detail4 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

4 of 4 entries

Part	Vendor	Product	Version	Target SW	Target HW
HW	tp-link	kasa_ec70	4.0	-	-
OS	tp-link	kasa_ec70_firmware	-	-	-
HW	tp-link	kasa_ec71	4.0	-	-
OS	tp-link	kasa_ec71_firmware	-	-	-

Explore more

Back to dashboard tp-link CVEs kasa_ec70 vulnerabilities

What researchers are saying

CVE-2026-13230

TECHEPAGES[verified]@techepagesPatch

TP‑Link released firmware updates to fix two CVEs that could allow local MitM attacks; users should update their devices or isolate them on a separate network.

elhacker.NET@elhackernetPatch

TP‑Link cameras Kasa EC70 v4/EC71 v4 suffer MitM vulnerabilities (CVE‑2026‑9770 & CVE‑2026‑13230), and the vendor has issued security updates to address them.

Хабр@habr_comGeneral

CVE-2026-13230 permits unauthenticated access to device geolocation via camera discovery, but no PoC, exploit, patch, or evidence of active exploitation is mentioned.

Infoflowcloud@infoflowcloudDisclosure

The tweet announces a new information‑disclosure vulnerability (CVE‑2026‑13230) affecting TP‑Link Kasa EC70/EC71, noting the exposure of geolocation data, but offers no PoC, exploit, patch, or evidence of active exploitation.

CVE@CVEnewDisclosure

The statement announces the discovery of a new information disclosure vulnerability (CVE‑2026‑13230) affecting TP‑Link Kasa devices, noting that sensitive geolocation data is exposed via local discovery.