Vulnerability · Published Jul 15, 2026 · Assigned by TPLink

CVE-2026-9770Hardcoded Cryptographic Key Information Disclosure Vulnerability on TP-Link Kasa EC70 and EC71

High 8.6

In plain English

A high-severity security flaw in Kasa EC70 v4 from TP-Link Systems Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 24% of all known vulnerabilities).

Severity (CVSS 4.0)8.6High

Exploit odds (30 days)0.3%top 75.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Kasa EC71 v4 and EC70 v4 firmware contains a static cryptographic private key stored in a read-only filesystem that is shared across devices. An attacker with access to the firmware image can extract the embedded key. Successful exploitation may allow an unauthenticated attacker on the same network to use this key in the web management service, compromising the confidentiality of encrypted communications. This may enable passive decryption of traffic or active man-in-the-middle (MITM) attacks

Affected products (as reported)

Vendor	Product	Versions
TP-Link Systems Inc.	Kasa EC71 v4	0 – before 2.4.0 Build 20260520 rel.4191
TP-Link Systems Inc.	Kasa EC70 v4	0 – before 2.4.0 Build 20260520 rel.4191

Weakness: CWE-321 · Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

In plain English

Official description

Affected products (as reported)

References