CVE-2026-9770
Medium
Description
Kasa EC71 v4 and EC70 v4 firmware contains a static cryptographic private key stored in a read-only filesystem that is shared across devices. An attacker with access to the firmware image can extract the embedded key. Successful exploitation may allow an unauthenticated attacker on the same network to use this key in the web management service, compromising the confidentiality of encrypted communications. This may enable passive decryption of traffic or active man-in-the-middle (MITM) attacks
SeverityMedium
CVSS5.3
Exploit probability—
Product
Tp-link Kasa Ec71 Firmware
PublishedJul 15, 2026
First seenJul 15, 2026
Weakness typeCWE-321CWE-321
How to fix
Update
- tp-link kasa_ec71_firmware2.4.0 or later
- tp-link kasa_ec70_firmware2.4.0 or later
Patches
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tp-link kasa_ec71_firmware | v < 2.4.0 | 2.4.0 |
| tp-link kasa_ec70_firmware | v < 2.4.0 | 2.4.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.