Tp-link Omada vulnerabilities

• tp link systems inc. omada access points, tp-link omada ds1008x firmware, omada ds1016g firmware +110 more +112 more Weak Credential Storage in TP-Link Omada Devices CVE-2025-15631 5.7 MediumAugust 3, 2026
• tp link systems inc. omada access points, tp-link omada ds1008x firmware, omada ds1016g firmware +113 more +115 more Device Provisioning Race Condition in TP-Link Omada Adoption Workflow CVE-2025-15630 5.8 MediumAugust 3, 2026
• tp link systems inc. omada access points, tp-link omada ds1008x firmware, omada ds1016g firmware +113 more +115 more Weak Session Key Generation in TP-Link Omada Adoption Protocol CVE-2025-15629 6.9 MediumAugust 3, 2026
• tp link systems inc. omada access points, tp-link omada ds1008x firmware, omada ds1016g firmware +114 more +116 more Hardcoded Certificates in TP-Link Omada Device Communications CVE-2025-15628 8.2 HighAugust 3, 2026
• tp link systems inc. omada access points, tp-link omada ds1008x firmware, omada ds1016g firmware +113 more +115 more Hardcoded Cryptographic Keys in TP-Link Omada Adoption Protocol Authentication CVE-2025-15627 6.9 MediumAugust 3, 2026
• tp-link omada, tp link systems inc. omada access points, omada app +116 more +118 more Weak Credential Protection During TP-Link Omada Device Adoption CVE-2025-15544 6.9 MediumAugust 3, 2026
• tp-link omada ds1008x firmware, omada ds1016g firmware, omada ds1016ge firmware +109 more +111 more Improper Certificate Validation in TP-Link Omada Cloud Communications CVE-2025-9291 7.7 HighAugust 3, 2026
• tp-link omada sg2005p-pd firmware, omada sg2008 firmware, omada sg2008p firmware +98 more +100 more Input Validation Vulnerability on Multiple Omada Switches CVE-2026-1668 Public exploit 7.7 HighMarch 13, 2026
• tp-link omada eap610 firmware, tp-link systems inc. eap610 v3 +1 more Unauthenticated Denial-of-Service Vulnerability in Omada EAP610 CVE-2025-7375 6.9 MediumMarch 5, 2026
• tp link systems inc. omada app, tp-link aginet, deco +21 more +23 more Insufficient Certificate Validation in Multiple Mobile Applications Allows Man in the Middle Interception CVE-2025-9293 7.7 HighFebruary 13, 2026
• tp-link omada, tp-link systems inc. omada cloud controller, tp-link aginet +12 more +14 more Permissive Web Security Policy Allows Cross-Origin Access Control Bypass on Omada Cloud Controllers CVE-2025-9292 2.0 LowFebruary 13, 2026
• tp-link omada controller Blind Server-Side Request Forgery (SSRF) in Omada Controller CVE-2025-9522 5.1 MediumJanuary 26, 2026
• tp-link omada controller Password Confirmation Bypass in Omada Controller CVE-2025-9521 2.1 LowJanuary 26, 2026
• tp-link omada controller IDOR Leading to Owner Account Hijacking in Omada Controller CVE-2025-9520 8.3 HighJanuary 26, 2026
• tp-link omada controller, beam bridge 5 ur firmware, dr3220v-4g firmware +83 more +85 more Authentication Weakness on Omada Controllers, Gateways and Access Points CVE-2025-9290 6.0 MediumJanuary 22, 2026
• tp-link omada controller, oc200 firmware, oc220 firmware +5 more +7 more Cross-Site Scripting (XSS) on Omada Controllers CVE-2025-9289 5.7 MediumJanuary 22, 2026
• tp-link er7206, er7206 omada gigabit vpn router, er7206 firmware +2 more A leftover debug code vulnerability exists in the cli_server debug functionality of Tp-Link... CVE-2024-21827 7.2 HighJune 25, 2024
• tp-link omada er605, omada er605 firmware +1 more TP-Link Omada ER605 Reliance on Security Through Obscurity Vulnerability CVE-2024-5244 5.0 MediumMay 23, 2024
• tp-link omada er605, omada er605 firmware +1 more TP-Link Omada ER605 Buffer Overflow Remote Code Execution Vulnerability CVE-2024-5243 Public exploit 7.5 HighMay 23, 2024
• tp-link omada er605, omada er605 firmware +1 more TP-Link Omada ER605 Stack-based Buffer Overflow Remote Code Execution Vulnerability CVE-2024-5242 7.5 HighMay 23, 2024
• tp-link omada er605, omada er605 firmware +1 more TP-Link Omada ER605 Comexe DDNS Response Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability CVE-2024-5228 7.5 HighMay 23, 2024
• tp-link omada er605, omada er605 firmware +1 more TP-Link Omada ER605 PPTP VPN username Command Injection Remote Code Execution Vulnerability CVE-2024-5227 7.5 HighMay 23, 2024
• tp-link er605, omada er605, omada er605 firmware +2 more TP-Link Omada ER605 Access Control Command Injection Remote Code Execution Vulnerability CVE-2024-1180 6.8 MediumApril 3, 2024
• tp-link er605, omada er605, omada er605 firmware +2 more TP-Link Omada ER605 DHCPv6 Client Options Stack-based Buffer Overflow Remote Code Execution Vulnerability CVE-2024-1179 7.5 HighApril 1, 2024
• tp-link omada er605, omada er605 firmware +1 more In TP-Link Omada er605 1.0.1 through (v2.6) 2.2.3, a cloud-brd binary is susceptible to an... CVE-2024-25139 10.0 CriticalMarch 14, 2024
• tp-link er7206 omada gigabit vpn router, er7206 firmware +1 more A command execution vulnerability exists in the guest resource functionality of Tp-Link ER7206... CVE-2023-43482 Public exploit 7.2 HighFebruary 6, 2024
• tp-link er7206 omada gigabit vpn router, er7206 firmware +1 more A post-authentication command injection vulnerability exists in the PPTP client functionality of... CVE-2023-36498 7.2 HighFebruary 6, 2024
• tp-link er7206 omada gigabit vpn router, er7206 firmware +1 more A post authentication command injection vulnerability exists in the ipsec policy functionality of... CVE-2023-47209 7.2 HighFebruary 6, 2024
• tp-link er7206 omada gigabit vpn router, er7206 firmware +1 more A post authentication command injection vulnerability exists in the GRE policy functionality of... CVE-2023-47167 7.2 HighFebruary 6, 2024
• tp-link er7206 omada gigabit vpn router, er7206 firmware +1 more A post authentication command injection vulnerability exists when configuring the web group... CVE-2023-47617 7.2 HighFebruary 6, 2024
• tp-link er7206 omada gigabit vpn router, er7206 firmware +1 more A post authentication command injection vulnerability exists when configuring the wireguard VPN... CVE-2023-46683 7.2 HighFebruary 6, 2024
• tp-link er7206 omada gigabit vpn router, er7206 firmware +1 more A post authentication command injection vulnerability exists when setting up the PPTP global... CVE-2023-42664 7.2 HighFebruary 6, 2024
• tp-link er7206 omada gigabit vpn router, er7206 firmware +1 more A post authentication command execution vulnerability exists in the web filtering functionality... CVE-2023-47618 7.2 HighFebruary 6, 2024
• tp-link omada software controller TP-Link Omada SDN Software Controller before 5.0.15 does not check if the authentication method... CVE-2021-44032 7.5 HighMarch 7, 2022
• tp-link omada controller TP-Link Omada Controller Software 3.2.6 allows Directory Traversal for reading arbitrary files... CVE-2020-12475 5.5 MediumMay 4, 2020