CVE-2026-76784

Name of the Vulnerable Software and Affected Versions TP-Link Kasa (affected versions not specified)

Description Multiple smart home devices have insufficient cryptographic protections in the local device communication protocol. An attacker on the same network can intercept, replay, or forge locally exchanged control messages, which may lead to unauthorized device control. This could allow an attacker to manipulate the operational state of a device, causing unauthorized state changes, disruption of normal functionality, or a denial-of-service condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.