TP

Gbhackers •Divya • August 27, 2026

TP-Link has revealed a critical vulnerability in Kasa smart devices that could allow an attacker on the same local network to intercept, replay, or forge control messages, potentially manipulating affected products. This issue, tracked as CVE-2026-76784, arises from inadequate cryptographic protections in the protocol used for local communications among Kasa devices. TP-Link has assigned […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerability in TP-Link Kasa Smart Devices Disclosed TP-Link has announced a high-severity vulnerability, tracked as CVE-2026-76784, affecting multiple Kasa smart devices. This flaw allows attackers on the same local network to intercept, replay, or forge device-control commands, potentially leading to unauthorized changes in device states or denial-of-service conditions. The vulnerability arises from inadequate cryptographic protections in the local communication protocol used by Kasa devices. Users of affected devices are at risk of manipulation, and the issue was published on August 26, 2026. TP-Link has issued a security advisory regarding this flaw, emphasizing the need for immediate attention from users. The vulnerability is categorized as critical due to its potential impact on smart home security. No specific patches or mitigations have been mentioned yet. 2 sources 59

Extracted Entities

TP

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (1)

CWE Weaknesses (1)

Platforms (1)