Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
Tp-link Systems Inc.
Omada Oc200, Oc220, Oc300, Oc400
Tp-link Systems Inc. Omada Oc200, Oc220, Oc300, Oc400 vulnerabilities
Any severity
Critical
High or worse
Medium or worse
Low or worse
Any EPSS
EPSS 10% or more
EPSS 50% or more
EPSS 90% or more
Known exploited
In KEV
Public exploit
Fix available
Apply
tp-link
omada controller
,
oc200 firmware
,
oc220 firmware
+5 more
+7 more
Cross-Site Scripting (XSS) on Omada Controllers
CVE-2025-9289
5.7
Medium
January 22, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open