TP-Link Kasa cameras leaked home GPS via unauthenticated UDP for 6 years

Security Advisory, IoT Vulnerability Research(github.com)view on HackerNews

Kasa Spot EC71IoTVulnerabilitySecurityTP-LinkEC71FirmwareRSAMD5GPSUnauthenticatedUDP

Author: BadChemical

Date: 7/17/2026

Article Summary:

A comprehensive security analysis of the Kasa Spot EC71 revealed multiple vulnerabilities compromising the device's confidentiality, integrity, and availability.