CVE-2025-8627 – TP-Link KP303 Unauthenticated Remote Command Injection

CVE ID : CVE-2025-8627

Published : Aug. 25, 2025, 10:15 p.m. | 20 minutes ago

Description : The TP-Link KP303 Smartplug can be issued unauthenticated protocol commands that may cause unintended power-off condition and potential information leak.

This issue affects TP-Link KP303 (US) Smartplug: before 1.1.0.

Severity: 8.7 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…