KP200 v3 vulnerabilities

2 known vulnerabilities in KP200 v3 from TP-Link. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  HS103 v5: Missing Authentication for Critical Functionality

  CVE-2026-108473Oct 14, 2026TP-Link

  Multiple Kasa devices contain an improper authentication vulnerability in the local device-management protocol. An unauthenticated adjacent attacker may send management instructions to an affected device without adequate authentication or authorization, allowi

• 8.7 High severity

  HS103P3 / HS103P4 v5: Missing Cryptographic Step

  CVE-2026-76784Aug 26, 2026TP-Link

  Multiple TP-Link Kasa smart home devices contain insufficient cryptographic protections in the local device communication protocol. An adjacent network attacker may intercept, replay or forge locally exchanged control messages, potentially resulting in unautho