Skip to content
OpenAdvisories

Product · TP-Link Systems

v1

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-19586 Public exploit

    Pre-Authentication OS Command Injection in Omada Gateways on OpenVPN Server in Omada Gateways

    A pre-authentication OS command injection vulnerability has been identified in Omada gateways configured to operate as an OpenVPN Server due to insufficient validation of client-supplied data during OpenVPN connection establishment. An unauthenticated remote …

    TP-Link Systems DR3650v v1 ER7412-M2 v1 ER603WP-4G-Outdoor v1 Network devices