Skip to content
OpenAdvisories
High WID-SEC-2026-2964 3 CVEs

TP-Link Omada Gateway: Mehrere Schwachstellen

Published Aug 20, 2026 · Updated Aug 20, 2026 · de-DE

Vendor: TP-Link Systems Product: Omada Gateway Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in TP-Link Omada Gateway ausnutzen, um beliebigen Programmcode auszuführen, um Informationen offenzulegen, um Dateien zu manipulieren und um einen Denial of Service Angriff durchzuführen.

Product

Das TP-Link Omada Gateway ist ein Router- und Firewall-Gerät für Unternehmen, das für die zentrale Verwaltung innerhalb der Omada Software Defined Networking (SDN)-Plattform konzipiert ist.

Vulnerabilities 3

  • Critical 9.3
    CVE-2026-19586 Public exploit

    Pre-Authentication OS Command Injection in Omada Gateways on OpenVPN Server in Omada Gateways

    A pre-authentication OS command injection vulnerability has been identified in Omada gateways configured to operate as an OpenVPN Server due to insufficient validation of client-supplied data during OpenVPN connection establishment. An unauthenticated remote …

    TP-Link Systems ER706W v1 ER7212PC v2 ER701-5G-Outdoor v1 Network devices
  • Medium 6.3
    CVE-2026-19683

    Unencrypted Credential Transmission in Omada Gateway Dynamic DNS Authentication in Omada Gateways

    A vulnerability exists in the Dynamic DNS (DDNS) functionality of TP-Link Omada Gateways. During communication with a third-party DDNS service, authentication credentials are transmitted over an unencrypted channel. An attacker who can observe or manipulate t…

    TP-Link Systems ER7206 v2 DR3220v-4G v1 ER707-M2 v1 Network devices
  • Medium 6.0
    CVE-2026-9033

    Unauthenticated Captive Portal Session Termination and Forced Logout in Omada Gateways

    An unauthenticated attacker with network access to the captive portal service of an affected device can terminate active captive portal sessions, including forcing logout of specific users or clearing all active sessions. Affected users must re-authenticate t…

    TP-Link Systems DR3220v-4G v1 ER7412-M2 v1 DR3650v-4G v1 Network devices

Revision history

  1. #1

    Initiale Fassung

References