All vulnerabilities
CVE-2026-108473

HS103 v5: Improper Authentication and Credential Exposure in Multiple TP-Link Kasa Devices

TP-Link Systems Inc. HS103 v5Network & edge
Open in ThreatlineRecord JSON
CVSS
8.7High
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.27%Chance of exploitation activity in the next 30 days, higher than 18% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in1.1.3 Build 250908 Rel.112508Also 1.1.1 Build 250908 Rel.112508, 1.1.0 Build 250225 Rel.171723 and 17 moreCVE List
Published14 Oct 2026Updated 14 Oct 2026CVE List

What fixes it

  • 1.1.3 Build 250908 Rel.112508HS103 v5CVE List
  • 1.1.1 Build 250908 Rel.112508EP10 v1CVE List
  • 1.1.0 Build 250225 Rel.171723EP40 v1CVE List
  • 1.1.2 Build 241220 Rel.165559HS200 v5CVE List
  • 1.1.2 Build 241223 Rel.094434KP401 v1CVE List
  • 1.1.4 Build 241223 Rel.105830KS230 KIT v2CVE List
Show all 24 fixed versions
  • 1.1.0 Build 250225 Rel.174632KP405 v1CVE List
  • 1.1.4 Build 241220 Rel.171050HS220 v3CVE List
  • 1.1.1 Build 250908 Rel.112945KP115 v1CVE List
  • 1.1.0 Build 250225 Rel.163425HS210 v3CVE List
  • 1.1.2 Build 241220 Rel.171333HS300 v2CVE List
  • 1.1.0 Build 250225 Rel.171724KP200 v3CVE List
  • 1.1.2 Build 241220 Rel.173321KP303 v2CVE List
  • 1.1.2 Build 241223 Rel.103857KS200 v1CVE List
  • 1.1.1 Build 250908 Rel.112526EP40A v1CVE List
  • 1.1.3 Build 241223 Rel.105515KS220 v1CVE List
  • 1.1.4 Build 241223 Rel.104700KS200M v1CVE List
  • 1.1.6 Build 250522 Rel.210254ES20M v1CVE List
  • 1.1.6 Build 250522 Rel.210254KS220M v1CVE List
  • 1.1.0 Build 250225 Rel.171723KP400 v3CVE List
  • 1.1.1 Build 260710 Rel.082646KL125 v4CVE List
  • 1.1.1 Build 260710 Rel.082646KL135 v2CVE List
  • 1.1.1 Build 260710 Rel.082646KL110 v4CVE List
  • 1.4.2 Build 260605 Rel.035033KL420L5 v1CVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

Multiple Kasa devices contain an improper authentication vulnerability in the local device-management protocol. An unauthenticated adjacent attacker may send management instructions to an affected device without adequate authentication or authorization, allowing modification of the device state or management settings. Under certain usage conditions involving interaction between the user, mobile application, and device-cloud service, insufficient protection of account-related communications may also expose account information.

Successful exploitation may allow an unauthenticated adjacent-network attacker to perform unauthorized device-management actions and disrupt legitimate user control. Under certain conditions, account-related information may also be exposed, potentially leading to compromise of the associated cloud account.

Text from CVE List

Affected versions 24

  • HS103 v5affected: all versions before 1.1.3 Build 250908 Rel.112508CVE List
  • EP10 v1affected: all versions before 1.1.1 Build 250908 Rel.112508CVE List
  • EP40 v1affected: all versions before 1.1.0 Build 250225 Rel.171723CVE List
  • HS200 v5affected: all versions before 1.1.2 Build 241220 Rel.165559CVE List
  • KP401 v1affected: all versions before 1.1.2 Build 241223 Rel.094434CVE List
  • KS230 KIT v2affected: all versions before 1.1.4 Build 241223 Rel.105830CVE List
  • KP405 v1affected: all versions before 1.1.0 Build 250225 Rel.174632CVE List
  • HS220 v3affected: all versions before 1.1.4 Build 241220 Rel.171050CVE List
  • KP115 v1affected: all versions before 1.1.1 Build 250908 Rel.112945CVE List
  • HS210 v3affected: all versions before 1.1.0 Build 250225 Rel.163425CVE List
  • HS300 v2affected: all versions before 1.1.2 Build 241220 Rel.171333CVE List
  • KP200 v3affected: all versions before 1.1.0 Build 250225 Rel.171724CVE List
  • KP303 v2affected: all versions before 1.1.2 Build 241220 Rel.173321CVE List
  • KS200 v1affected: all versions before 1.1.2 Build 241223 Rel.103857CVE List
  • EP40A v1affected: all versions before 1.1.1 Build 250908 Rel.112526CVE List
  • KS220 v1affected: all versions before 1.1.3 Build 241223 Rel.105515CVE List
  • KS200M v1affected: all versions before 1.1.4 Build 241223 Rel.104700CVE List
  • ES20M v1affected: all versions before 1.1.6 Build 250522 Rel.210254CVE List
  • KS220M v1affected: all versions before 1.1.6 Build 250522 Rel.210254CVE List
  • KP400 v3affected: all versions before 1.1.0 Build 250225 Rel.171723CVE List
  • KL125 v4affected: all versions before 1.1.1 Build 260710 Rel.082646CVE List
  • KL135 v2affected: all versions before 1.1.1 Build 260710 Rel.082646CVE List
  • KL110 v4affected: all versions before 1.1.1 Build 260710 Rel.082646CVE List
  • KL420L5 v1affected: all versions before 1.4.2 Build 260605 Rel.035033CVE List

References 3