CVE-2026-9033
Unauthenticated Captive Portal Session Termination and Forced Logout in Omada Gateways
An unauthenticated attacker with network access to the captive portal service of an affected device can terminate active captive portal sessions, including forcing logout of specific users or clearing all active sessions. Affected users must re-authenticate to regain access.
Successful exploitation may allow termination of individual or all active captive portal sessions, causing temporary service disruption and requiring users to re-authenticate.
Attack profile
How easy it is to exploit
- Attack vector
- Adjacent network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Unauthenticated Captive Portal Session Termination and Forced Logout in Omada Gateways
An unauthenticated attacker with network access to the captive portal service of an affected device can terminate active captive portal sessions, including forcing logout of specific users or clearing all active sessions. Affected users must re-authenticate to regain access.
Successful exploitation may allow termination of individual or all active captive portal sessions, causing temporary service disruption and requiring users to re-authenticate.
- Record
CVE-2026-9033- CVSS 4.0
- 6.0 Medium
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N - Weakness
- CWE-306
- Updated
- 2026-11-02
EUVDEUVD-2026-63543
An unauthenticated attacker with network access to the captive portal service of an affected device can terminate active captive portal sessions, including forcing logout of specific users or clearing all active sessions. Affected users must re-authenticate to regain access.
Successful exploitation may allow termination of individual or all active captive portal sessions, causing temporary service disruption and requiring users to re-authenticate.
- Record
EUVD-2026-63543- CVSS 4.0
- 6.0 Medium
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-fpm4-hq62-cqf6
An unauthenticated attacker with network access to the captive portal service of an affected...
An unauthenticated attacker with network access to the captive portal service of an affected device can terminate active captive portal sessions, including forcing logout of specific users or clearing all active sessions. Affected users must re-authenticate to regain access.
Successful exploitation may allow termination of individual or all active captive portal sessions, causing temporary service disruption and requiring users to re-authenticate.
- Record
GHSA-fpm4-hq62-cqf6- CVSS 4.0
- 6.0 Medium
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-306
- Updated
- 2026-11-02
NVD
An unauthenticated attacker with network access to the captive portal service of an affected device can terminate active captive portal sessions, including forcing logout of specific users or clearing all active sessions. Affected users must re-authenticate to regain access.
Successful exploitation may allow termination of individual or all active captive portal sessions, causing temporary service disruption and requiring users to re-authenticate.
- Record
CVE-2026-9033- CVSS 4.0
- 6.0 Medium
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-306
- Updated
- 2026-11-02
Affected products
- tp-link dr3150 firmware
- tp-link dr3220v-4g firmware
- tp-link dr3650v-4g firmware
- tp-link dr3650v firmware
- tp-link er603wp-4g-outdoor firmware
- tp-link er605 firmware
- tp-link er605w firmware
- tp-link er701-5g-outdoor firmware
- tp-link er703wp-4g-outdoor firmware
- tp-link er706w-4g firmware
- tp-link er706w firmware
- tp-link er706wp-4g firmware
Show 25 moreShow less
- tp-link er707-m2 firmware
- tp-link er7206 firmware
- tp-link er7212pc firmware
- tp-link er7406 firmware
- tp-link er7412-m2 firmware
- tp-link er8411 firmware
- tp-link systems inc er7406 v1
- tp-link systems inc er7412-m2 v1
- tp-link systems inc. dr3150 v1
- tp-link systems inc. dr3220v-4g v1
- tp-link systems inc. dr3650v v1
- tp-link systems inc. dr3650v-4g v1
- tp-link systems inc. er603wp-4g-outdoor v1
- tp-link systems inc. er605 v2
- tp-link systems inc. er605w v2
- tp-link systems inc. er701-5g-outdoor v1
- tp-link systems inc. er703wp-4g-outdoor v1
- tp-link systems inc. er706w v1
- tp-link systems inc. er706w-4g v1
- tp-link systems inc. er706w-4g v2
- tp-link systems inc. er706wp-4g v1
- tp-link systems inc. er707-m2 v1
- tp-link systems inc. er7206 v2
- tp-link systems inc. er7212pc v2
- tp-link systems inc. er8411 v1
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-9033 is a medium vulnerability (CVSS 6.0) in Tp-link Dr3150 Firmware, published August 20, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.28%, the 20th percentile. No source names a fixed version.