TP-Link Systems Inc HS300 v2 vulnerabilities

2 CVEs affecting TP-Link Systems Inc HS300 v2, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-108473, published 2026-10-14.

More from TP-Link Systems Inc.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-108473, published 2026-10-14. High severity, CVSS 8.7. EPSS: 0.3% chance of exploitation in the next 30 days. Multiple Kasa devices contain an improper authentication vulnerability in the local device-management protocol. An unauthenticated adjacent attacker may send management instructions to an affected…
• CVE-2026-76784, published 2026-08-26. High severity, CVSS 8.7. EPSS: 0.2% chance of exploitation in the next 30 days. Multiple TP-Link Kasa smart home devices contain insufficient cryptographic protections in the local device communication protocol. An adjacent network attacker may intercept, replay or forge locally…