EP40A vulnerabilities

1 known vulnerability in EP40A from TP-Link. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  HS103P3 / HS103P4 v5: Missing Cryptographic Step

  CVE-2026-76784Aug 26, 2026TP-Link

  Multiple TP-Link Kasa smart home devices contain insufficient cryptographic protections in the local device communication protocol. An adjacent network attacker may intercept, replay or forge locally exchanged control messages, potentially resulting in unautho