CVE-2026-105674

The TP-Link Tapo C325WB V2 is vulnerable to a predictable media stream pre-shared key generation. The device uses a time-seeded pseudo-random number generator to create keys for its local media streaming service, allowing an unauthenticated attacker on the adjacent network to recover the key. Suc...

CVE-2026-105674: Use of Insufficiently Random Values

TP-Link Tapo C325WB V2 generates the pre-shared key used by its local media streaming service with a time-seeded pseudo-random number generator, making the key predictable and recoverable. An unauthenticated attacker on the adjacent network can recover the key and authenticate to the media...

CVE-2023-6324

ThroughTek Kalay SDK uses a predictable PSK value in the DTLS session when encountering an unexpected PSK identity...