Skip to content
OpenAdvisories
High · 7.7 Public exploit CVE-2026-1668 EUVD-2026-12049GHSA-fmw5-jxp8-6hq3

Input Validation Vulnerability on Multiple Omada Switches

Published Mar 13, 2026 · Updated Mar 13, 2026 · Assigned by TPLink

Vendor: TP-Link Systems Product: SG2005P-PD 1.x Product: SG2008 4.2x Product: SG2008 4.3x Product: SG2008P 3.2x Product: SG2008P 3.3x Product: SG2016P 1.2x Product: SG2016P 1.3x Product: SG2210MP 4.2x Product: SG2210MP 5.2x Product: SG2210MP 5.x Product: SG2210P 5.3x Product: SG2210XMP-M2 1.x Product: SG2218 1.2x Product: SG2218 1.3x Product: SG2218P 1.2x Product: SG2218P 2.2x Product: SG2218P 2.x Product: SG2428LP 1.x Product: SG2428P 5.2x Product: SG2428P 5.3x Product: SG2452LP 1.x Product: SG3210 3.2x Product: SG3210 3.3x Product: SG3210X-M2 1.2x Product: SG3210X-M2 1.x Product: SG3210XHP-M2 3.x Product: SG3218XP-M2 1.x Product: SG3428 2.4x Product: SG3428MP 6.3x Product: SG3428X 1.4x Product: SG3428X-M2 1.2x Product: SG3428XF 1.3x Product: SG3428XMP 3.3x Product: SG3428XMPP 1.2x Product: SG3428XPP-M2 1.2x Product: SG3452 1.2x Product: SG3452 1.3x Product: SG3452P 3.3x Product: SG3452P 3.4x Product: SG3452X 1.2x Product: SG3452X 1.3x Product: SG3452XMPP 1.x Product: SG3452XP 2.3x Product: SL2428P 6.2x Product: SX3016F 1.2x Product: SX3016F 1.3x Product: SX3032F 1.x Product: SX3832 1.x Product: SX3832MPP 1.x Product: TL-SG3452P 3.0 Category: Network devices

Description

The web interface on multiple Omada switches does not adequately validate certain external inputs, which may lead to out-of-bound memory access when processing crafted requests. Under specific conditions, this flaw may result in unintended command execution.<br>An unauthenticated attacker with network access to the affected interface may cause memory corruption, service instability, or information disclosure. Successful exploitation may allow remote code execution or denial-of-service.

Affected products

VendorProductAffectedFixed
TP-Link Systems SG2008P 3.2x < 3.20.17 Build 20260121 Rel.53429 3.20.17 Build 20260121 Rel.53429
TP-Link Systems SG2008P 3.3x < 3.30.1 Build 20260127 Rel.32017 3.30.1 Build 20260127 Rel.32017
TP-Link Systems SX3016F 1.3x < 1.30.1 Build 20260129 Rel.8831 1.30.1 Build 20260129 Rel.8831
TP-Link Systems SX3016F 1.2x < 1.20.16 Build 20260121 Rel.57953 1.20.16 Build 20260121 Rel.57953
TP-Link Systems SG3428 2.4x < 2.40.1 Build 20260127 Rel.39545 2.40.1 Build 20260127 Rel.39545
TP-Link Systems SG3428XMP 3.3x < 3.30.1 Build 20260127 Rel.39545 3.30.1 Build 20260127 Rel.39545
TP-Link Systems SG3428X 1.4x < 1.40.1 Build 20260127 Rel.39545 1.40.1 Build 20260127 Rel.39545
TP-Link Systems SG3428XF 1.3x < 1.30.1 Build 20260127 Rel.39545 1.30.1 Build 20260127 Rel.39545
TP-Link Systems SG3452P 3.4x < 3.40.1 Build 20260128 Rel.7041 3.40.1 Build 20260128 Rel.7041
TP-Link Systems SG3428MP 6.3x < 6.30.1 Build 20260127 Rel.39545 6.30.1 Build 20260127 Rel.39545
TP-Link Systems SG2218P 2.2x < 2.20.2 Build 20260127 Rel.32017 2.20.2 Build 20260127 Rel.32017
TP-Link Systems SG2016P 1.3x < 1.30.1 Build 20260127 Rel.32017 1.30.1 Build 20260127 Rel.32017
TP-Link Systems SG3452XP 2.3x < 2.30.1 Build 20260128 Rel.8721 2.30.1 Build 20260128 Rel.8721
TP-Link Systems SG3428XMPP 1.2x < 1.20.1 Build 20260127 Rel.39545 1.20.1 Build 20260127 Rel.39545
TP-Link Systems SG3452X 1.3x < 1.30.1 Build 20260128 Rel.8721 1.30.1 Build 20260128 Rel.8721
TP-Link Systems SG2008 4.3x < 4.30.1 Build 20260127 Rel.32017 4.30.1 Build 20260127 Rel.32017
TP-Link Systems SG3210 3.3x < 3.30.1 Build 20260206 Rel.33103 3.30.1 Build 20260206 Rel.33103
TP-Link Systems SG2210MP 5.2x < 5.20.1 Build 20260127 Rel.32017 5.20.1 Build 20260127 Rel.32017
TP-Link Systems SG2210P 5.3x < 5.30.1 Build 20260127 Rel.32017 5.30.1 Build 20260127 Rel.32017
TP-Link Systems SG2218 1.3x < 1.30.1 Build 20260127 Rel.32017 1.30.1 Build 20260127 Rel.32017
TP-Link Systems SG3452 1.3x < 1.30.1 Build 20260128 Rel.7041 1.30.1 Build 20260128 Rel.7041
TP-Link Systems SG3210X-M2 1.2x < 1.20.1 Build 20260129 Rel.13605 1.20.1 Build 20260129 Rel.13605
TP-Link Systems SG2210XMP-M2 1.x < 1.0.19 Build 20260121 Rel.53314 1.0.19 Build 20260121 Rel.53314
TP-Link Systems SG2008 4.2x < 4.20.17 Build 20260121 Rel.53429 4.20.17 Build 20260121 Rel.53429
TP-Link Systems SG2218P 1.2x < 1.20.17 Build 20260121 Rel.53429 1.20.17 Build 20260121 Rel.53429
TP-Link Systems SG3210 3.2x < 3.20.17 Build 20260121 Rel.53429 3.20.17 Build 20260121 Rel.53429
TP-Link Systems SG3428X-M2 1.2x < 1.20.18 Build 20260121 Rel.54271 1.20.18 Build 20260121 Rel.54271
TP-Link Systems SX3832MPP 1.x < 1.0.11 Build 20260121 Rel.56907 1.0.11 Build 20260121 Rel.56907
TP-Link Systems SG2218 1.2x < 1.20.17 Build 20260121 Rel.53429 1.20.17 Build 20260121 Rel.53429
TP-Link Systems SX3832 1.x < 1.0.12 Build 20260121 Rel.56907 1.0.12 Build 20260121 Rel.56907
TP-Link Systems SG2428LP 1.x < 1.0.15 Build 20260121 Rel.53429 1.0.15 Build 20260121 Rel.53429
TP-Link Systems SL2428P 6.2x < 6.20.18 Build 20260121 Rel.53429 6.20.18 Build 20260121 Rel.53429
TP-Link Systems SG3218XP-M2 1.x < 1.0.19 Build 20260121 Rel.53314 1.0.19 Build 20260121 Rel.53314
TP-Link Systems SG3210XHP-M2 3.x < 3.0.21 Build 20260121 Rel.53314 3.0.21 Build 20260121 Rel.53314
TP-Link Systems SG2218P 2.x < 2.0.14 Build 20260121 Rel.53429 2.0.14 Build 20260121 Rel.53429
TP-Link Systems SG3210X-M2 1.x < 1.0.19 Build 20260121 Rel.53314 1.0.19 Build 20260121 Rel.53314
TP-Link Systems SG2428P 5.3x < 5.30.16 Build 20260121 Rel.53429 5.30.16 Build 20260121 Rel.53429
TP-Link Systems SG2210MP 4.2x < 4.20.18 Build 20260121 Rel.53429 4.20.18 Build 20260121 Rel.53429
TP-Link Systems SG3452P 3.3x < 3.30.17 Build 20260121 Rel.54132 3.30.17 Build 20260121 Rel.54132
TP-Link Systems SG3452 1.2x < 1.20.17 Build 20260121 Rel.54132 1.20.17 Build 20260121 Rel.54132
TP-Link Systems SG2452LP 1.x < 1.0.13 Build 20260121 Rel.54132 1.0.13 Build 20260121 Rel.54132
TP-Link Systems SX3032F 1.x < 1.0.15 Build 20260121 Rel.56907 1.0.15 Build 20260121 Rel.56907
TP-Link Systems SG3452X 1.2x < 1.20.18 Build 20260121 Rel.55833 1.20.18 Build 20260121 Rel.55833
TP-Link Systems SG3452XMPP 1.x < 1.0.15 Build 20260121 Rel.55833 1.0.15 Build 20260121 Rel.55833
TP-Link Systems SG3428XPP-M2 1.2x < 1.20.19 Build 20260121 Rel.54271 1.20.19 Build 20260121 Rel.54271
TP-Link Systems TL-SG3452P 3.0 < 3.0.22 Build 20260121 Rel.54132 3.0.22 Build 20260121 Rel.54132
TP-Link Systems SG2428P 5.2x < 5.20.20 Build 20260121 Rel.53429 5.20.20 Build 20260121 Rel.53429
TP-Link Systems SG2210MP 5.x < 5.0.15 Build 20260121 Rel.53429 5.0.15 Build 20260121 Rel.53429
TP-Link Systems SG2005P-PD 1.x < 1.0.19 Build 20260121 Rel.53429 1.0.19 Build 20260121 Rel.53429
TP-Link Systems SG2016P 1.2x < 1.20.17 Build 20260121 Rel.53429 1.20.17 Build 20260121 Rel.53429
TP-Link Systems SG3452XP 2.2x < 2.20.20 Build 20260121 Rel.55833 2.20.20 Build 20260121 Rel.55833
TP-Link Systems SG3428XMP 3.2x < 3.20.21 Build 20260113 Rel.67732 3.20.21 Build 20260113 Rel.67732
TP-Link Systems SG3428X 1.3x < 1.30.17 Build 20260113 Rel.67732 1.30.17 Build 20260113 Rel.67732
TP-Link Systems SG3428XF 1.2x < 1.20.16 Build 20260113 Rel.67732 1.20.16 Build 20260113 Rel.67732
TP-Link Systems SG3428MP 6.2x < 6.20.20 Build 20260113 Rel.67732 6.20.20 Build 20260113 Rel.67732
TP-Link Systems TL-SG3428MP 5.x < 5.0.25 Build 20260113 Rel.67732 5.0.25 Build 20260113 Rel.67732
TP-Link Systems SG3428 2.3x < 2.30.16 Build 20260113 Rel.67732 2.30.16 Build 20260113 Rel.67732
TP-Link Systems SG3428XMPP 1.x < 1.0.16 Build 20260113 Rel.67732 1.0.16 Build 20260113 Rel.67732
TP-Link Systems TL-SG2428P 4.x < 4.0.26 Build 20260121 Rel.53429 4.0.26 Build 20260121 Rel.53429
TP-Link Systems SG2210P 5.2x < 5.20.18 Build 20260121 Rel.53429 5.20.18 Build 20260121 Rel.53429
TP-Link Systems SX3008F 1.2x — —
TP-Link Systems SX3206HPP 1.20 — —

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 2 repositories

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

References