Skip to content
OpenAdvisories
Medium · 6.3 CVE-2026-19683 EUVD-2026-63545GHSA-hgmf-v69c-5gmf

Unencrypted Credential Transmission in Omada Gateway Dynamic DNS Authentication in Omada Gateways

Published Aug 20, 2026 · Updated Aug 20, 2026 · Assigned by TPLink

Vendor: TP-Link Systems Product: DR3150 v1 Product: DR3220v-4G v1 Product: DR3650v v1 Product: DR3650v-4G v1 Product: ER603WP-4G-Outdoor v1 Product: ER605 v2 Product: ER605W v2 Product: ER701-5G-Outdoor v1 Product: ER703WP-4G-Outdoor v1 Product: ER706W v1 Product: ER706W-4G v2 Product: ER706WP-4G v1 Product: ER707-M2 v1 Product: ER7206 v2 Product: ER7212PC v2 Product: ER7406 v1 Product: ER7412-M2 v1 Product: ER8411 v1 Product: v1 Category: Network devices

Description

A vulnerability exists in the Dynamic DNS (DDNS) functionality of TP-Link Omada Gateways. During communication with a third-party DDNS service, authentication credentials are transmitted over an unencrypted channel. An attacker who can observe or manipulate traffic between an affected device and the DDNS service may obtain sensitive authentication information or interfere with DDNS update operations. Exploitation requires DDNS to be configured, communication with an external DDNS service, and attacker visibility or control of the relevant network path. 

Successful exploitation may result in disclosure of DDNS account credentials, unauthorized access to DDNS management functionality, or modification of DNS records associated with the affected deployment.

Affected products

VendorProductAffectedFixed
TP-Link Systems ER7212PC v2 < 2.4.3 Build 20260722 Rel.40250 2.4.3 Build 20260722 Rel.40250
TP-Link Systems ER605 v2 < 2.4.4 Build 20260630 Rel.14398 2.4.4 Build 20260630 Rel.14398
TP-Link Systems ER7206 v2 < 2.3.5 Build 20260625 Rel.43136 2.3.5 Build 20260625 Rel.43136
TP-Link Systems ER7406 v1 < 1.3.4 Build 20260625 Rel.43136 1.3.4 Build 20260625 Rel.43136
TP-Link Systems ER707-M2 v1 < 1.4.4 Build 20260625 Rel.43063 1.4.4 Build 20260625 Rel.43063
TP-Link Systems ER7412-M2 v1 < 1.2.0 Build 20260630 Rel.82947 1.2.0 Build 20260630 Rel.82947
TP-Link Systems ER8411 v1 < 1.4.1 Build 20260708 Rel.64832 1.4.1 Build 20260708 Rel.64832
TP-Link Systems ER706W v1 < 1.2.11 Build 20260723 Rel.41567 1.2.11 Build 20260723 Rel.41567
TP-Link Systems v1 < 1.2.6 Build 20260723 Rel.41321 1.2.6 Build 20260723 Rel.41321
TP-Link Systems ER706W-4G v2 < 2.1.11 Build 20260723 Rel.41624 2.1.11 Build 20260723 Rel.41624
TP-Link Systems ER706WP-4G v1 < 1.1.11 Build 20260723 Rel.41624 1.1.11 Build 20260723 Rel.41624
TP-Link Systems ER703WP-4G-Outdoor v1 < 1.1.7 Build 20260723 Rel.41712 1.1.7 Build 20260723 Rel.41712
TP-Link Systems DR3220v-4G v1 < 1.2.0 Build 20260630 Rel.82652 1.2.0 Build 20260630 Rel.82652
TP-Link Systems DR3650v v1 < 1.2.0 Build 20260630 Rel.83311 1.2.0 Build 20260630 Rel.83311
TP-Link Systems DR3650v-4G v1 < 1.2.0 Build 20260630 Rel.83347 1.2.0 Build 20260630 Rel.83347
TP-Link Systems ER603WP-4G-Outdoor v1 < 1.0.2 Build 20260723 Rel.43271 1.0.2 Build 20260723 Rel.43271
TP-Link Systems DR3150 v1 < 1.0.1 Build 20260722 Rel.16854 1.0.1 Build 20260722 Rel.16854
TP-Link Systems ER701-5G-Outdoor v1 < 1.0.3 Build 20260723 Rel.40931 1.0.3 Build 20260723 Rel.40931
TP-Link Systems ER605W v2 < 2.0.4 Build 20260723 Rel.43763 2.0.4 Build 20260723 Rel.43763

Advisories 1

References