Omada cloud controller

2 results · Clear filters · Feed

• Medium 6.0
  CVE-2025-9290

  Authentication Weakness on Omada Controllers, Gateways and Access Points

  An authentication weakness was identified in Omada Controllers, Gateways and Access Points, controller-device adoption due to improper handling of random values. Exploitation requires advanced network positioning and allows an attacker to intercept adoption t…

  TP-Link Systems Omada Software Controller Omada cloud controller Omada Gateway (ER707-M2, ER-8411) Network devices
  Jan 22, 2026
• Medium 5.7
  CVE-2025-9289

  Cross-Site Scripting (XSS) on Omada Controllers

  A Cross-Site Scripting (XSS) vulnerability was identified in a parameter in Omada Controllers due to improper input sanitization. Exploitation requires advanced conditions, such as network positioning or emulating a trusted entity, and user interaction by an …

  TP-Link Systems Omada Software Controller Omada cloud controller Omada OC200, OC220, OC300, OC400 Network devices
  Jan 22, 2026