Skip to content
OpenAdvisories

Product · TP-Link Systems

Omada Software Controller (Windows)

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2026-84941

    Omada Controller XML External Entity (XXE) Injection in SAML IdP Metadata Parsing Leading to Arbitrary Local File Read

    An information disclosure vulnerability in the SAML Single Sign-On (SSO) functionality of Omada Controller allows an authenticated user with SAML configuration privileges to access sensitive information due to insufficient validation of user-supplied SAML met…

    TP-Link Systems OC300 v1 OC200 v3 OC220 v2 Linux Windows Network devices