July 18, 2026
- TP-Link Kasa EC71 cameras leaked precise home GPS via unauthenticated UDP for six years (CVE-2026-13230), returning sub-meter coordinates to a single packet; the researcher rates it 7.1 High versus TP-Link's 5.3 (write-up) (discussion). gruez tempers the framing, noting exposure requires LAN access rather than direct internet reach. · IoT & Policy
in A Pre-Auth RCE Lands in WordPress Core, Proof-of-Concept and All