Tp-link Omada Controller vulnerabilities

• tp-link omada controller Blind Server-Side Request Forgery (SSRF) in Omada Controller CVE-2025-9522 5.1 MediumJanuary 26, 2026
• tp-link omada controller Password Confirmation Bypass in Omada Controller CVE-2025-9521 2.1 LowJanuary 26, 2026
• tp-link omada controller IDOR Leading to Owner Account Hijacking in Omada Controller CVE-2025-9520 8.3 HighJanuary 26, 2026
• tp-link omada controller, beam bridge 5 ur firmware, dr3220v-4g firmware +83 more +85 more Authentication Weakness on Omada Controllers, Gateways and Access Points CVE-2025-9290 6.0 MediumJanuary 22, 2026
• tp-link omada controller, oc200 firmware, oc220 firmware +5 more +7 more Cross-Site Scripting (XSS) on Omada Controllers CVE-2025-9289 5.7 MediumJanuary 22, 2026
• tp-link omada controller TP-Link Omada Controller Software 3.2.6 allows Directory Traversal for reading arbitrary files... CVE-2020-12475 5.5 MediumMay 4, 2020