CVE-2026-76784 | TP-Link KL125 Local Device Communication Protocol authentication replay

A vulnerability, which was classified as critical, has been found in TP-Link HS103P3, HS103P4 v5, EP10, EP25 V2, HS300 V2, KP303 V2, EP40A, KP125MP2, KP125MP4, KP115, KS225, EP40M, KS205, KS240, ES20M, KS220M, KP200 V3, HS200 V5.26, HS220-LA 6.6, HS220-BL 6.6, HS220 V3.26, HS220-LA 4.6, HS220-BL 4.6 and KL125. This impacts an unknown function of the component Local Device Communication Protocol. The manipulation leads to authentication bypass by capture-replay.

This vulnerability is documented as CVE-2026-76784. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More