Skip to content
OpenAdvisories

Product · TP-Link Systems

Omada cloud controller

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.0
    CVE-2025-9292

    Permissive Web Security Policy Allows Cross-Origin Access Control Bypass on Omada Cloud Controllers

    A permissive web security configuration may allow cross-origin restrictions enforced by modern browsers to be bypassed under specific circumstances. Exploitation requires the presence of an existing client-side injection vulnerability and user access to the a…

    TP-Link Systems Omada cloud controller Network devices