CVE-2026-13230 Information Disclosure Vulnerability in Local Discovery Response in TP-Link Kasa EC70 and EC71
An attacker on the local network can retrieve sensitive geolocation data from TP-Link Kasa cameras without authentication.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-13230?
CVE-2026-13230 is a medium-severity vulnerability in TP-Link Systems Inc. Kasa EC70 v4, published on 15 Jul 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
An information disclosure vulnerability was identified in TP-Link Kasa EC70 v4 and EC71 v4 in the local discovery mechanism, which exposes sensitive geolocation information without requiring authentication. This issue allows an attacker on the same local network to retrieve geolocation-related data through crafted responses.
The vulnerability impacts confidentiality only, with no evidence of integrity of availability impact.
Weakness: CWE-200
Which versions are affected by CVE-2026-13230?
It affects 2 products.
Products include Tp-Link Kasa Ec70 Firmware, Tp-Link Kasa Ec71 Firmware.
How do I fix CVE-2026-13230?
No fix has been published for CVE-2026-13230 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-13230 being exploited?
There is no known exploitation of CVE-2026-13230 in the wild and no public exploit code.
Other vulnerabilities in TP-Link Systems Inc. Kasa EC70 v4
Sources
Also known as GHSA-rccw-h6pm-46g4.