Skip to content
OpenAdvisories
High · 8.2 CVE-2025-15628 EUVD-2025-210610GHSA-8mhg-76f5-54fp

Hardcoded Certificates in TP-Link Omada Device Communications

Published Aug 3, 2026 · Updated Aug 3, 2026 · Assigned by TPLink

Description

Affected
Omada devices rely on embedded certificates that are shared across deployments
to establish trust between controllers and managed devices.

An attacker
who obtains the embedded certificates may be able to impersonate trusted
controllers or devices and intercept affected communications.

Affected products

VendorProductAffectedFixed
TP-Link Systems Omada Gateways — —
TP-Link Systems Omada Switches — —
TP Link Systems Omada Access Points — —
TP-Link Systems Omada Controllers — —
TP-Link Systems Omada OLTs — —

References