Skip to content
OpenAdvisories

Product · TP-Link System

Omada Software Controller (Windows)

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-102298

    Insufficient Authorization and User Boundary Validation in Omada Controller MSP

    In Omada Controller MSP mode, the user-confirmation endpoint fails to enforce the required permission check. An authenticated user can supply a caller-controlled Identifier parameter to validate credentials for another account and receive responses that disti…

    TP-Link System Omada Software Controller (Windows) Windows Network devices