Mmastodon TechnologyCybersecurity first seen 5 h ago, last 5 h ago, peak #9

TP-Link Tapo S505 vulnerability exposes cryptographic keys

Original: 🚨 EUVD-2026-95263 📊 Score: 5.4/10 (CVSS v3.1) 📦 Product: Tapo S505 v1.6 🏢 Vendor: TP-Link System Inc. 📅 Updated: 2026-10

A newly catalogued vulnerability, EUVD-2026-95263, affects TP-Link's Tapo S505 smart plug running firmware version 1.6. The device stores cryptographic material in plaintext in nonvolatile storage, meaning an attacker with physical access to the device could extract sensitive security credentials. The flaw carries a moderate severity score of 5.4 out of 10 under CVSS v3.1. The advisory was updated in October 2026.

Why now: Physical-access key extraction from a widely used smart home device raises practical security concerns for owners.

TP-LinkTapo S505EUVD-2026-95263

Open on mastodon →

Evidence

• 🚨 EUVD-2026-95263 📊 Score: 5.4/10 (CVSS v3.1) 📦 Product: Tapo S505 v1.6 🏢 Vendor: TP-Link System Inc. 📅 Updated: 2026-10-08 📝 Affected Tapo device firmware stores device-specific cryptographic material in plaintext within nonvolatile storage. An attacker with physical access to… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/1542326