Skip to content
OpenAdvisories
Medium · 6.0 CVE-2026-9033 EUVD-2026-63543GHSA-fpm4-hq62-cqf6

Unauthenticated Captive Portal Session Termination and Forced Logout in Omada Gateways

Published Aug 20, 2026 · Updated Aug 20, 2026 · Assigned by TPLink

Vendor: TP-Link Systems Product: DR3150 v1 Product: DR3220v-4G v1 Product: DR3650v v1 Product: DR3650v-4G v1 Product: ER603WP-4G-Outdoor v1 Product: ER605 v2 Product: ER605W v2 Product: ER701-5G-Outdoor v1 Product: ER703WP-4G-Outdoor v1 Product: ER706W v1 Product: ER706W-4G v1 Product: ER706W-4G v2 Product: ER706WP-4G v1 Product: ER707-M2 v1 Product: ER7206 v2 Product: ER7212PC v2 Product: ER7406 v1 Product: ER7412-M2 v1 Product: ER8411 v1 Category: Network devices

Description

An unauthenticated attacker with network access to the captive portal service of an affected device can terminate active captive portal sessions, including forcing logout of specific users or clearing all active sessions. Affected users must re-authenticate to regain access. 

Successful exploitation may allow termination of individual or all active captive portal sessions, causing temporary service disruption and requiring users to re-authenticate.

Affected products

VendorProductAffectedFixed
TP-Link Systems ER7212PC v2 < 2.4.3 Build 20260722 Rel.40250 2.4.3 Build 20260722 Rel.40250
TP-Link Systems ER605 v2 < 2.4.4 Build 20260630 Rel.14398 2.4.4 Build 20260630 Rel.14398
TP-Link Systems ER7206 v2 < 2.3.5 Build 20260625 Rel.43136 2.3.5 Build 20260625 Rel.43136
TP-Link Systems ER7406 v1 < 1.3.4 Build 20260625 Rel.43136 1.3.4 Build 20260625 Rel.43136
TP-Link Systems ER707-M2 v1 < 1.4.4 Build 20260625 Rel.43063 1.4.4 Build 20260625 Rel.43063
TP-Link Systems ER7412-M2 v1 < 1.2.0 Build 20260630 Rel.82947 1.2.0 Build 20260630 Rel.82947
TP-Link Systems ER8411 v1 < 1.4.1 Build 20260708 Rel.64832 1.4.1 Build 20260708 Rel.64832
TP-Link Systems ER706W v1 < 1.2.11 Build 20260723 Rel.41567 1.2.11 Build 20260723 Rel.41567
TP-Link Systems ER706W-4G v1 < 1.2.6 Build 20260723 Rel.41321 1.2.6 Build 20260723 Rel.41321
TP-Link Systems ER706W-4G v2 < 2.1.11 Build 20260723 Rel.41624 2.1.11 Build 20260723 Rel.41624
TP-Link Systems ER706WP-4G v1 < 1.1.11 Build 20260723 Rel.41624 1.1.11 Build 20260723 Rel.41624
TP-Link Systems ER703WP-4G-Outdoor v1 < 1.1.7 Build 20260723 Rel.41712 1.1.7 Build 20260723 Rel.41712
TP-Link Systems DR3220v-4G v1 < 1.2.0 Build 20260630 Rel.82652 1.2.0 Build 20260630 Rel.82652
TP-Link Systems DR3650v v1 < 1.2.0 Build 20260630 Rel.83311 1.2.0 Build 20260630 Rel.83311
TP-Link Systems DR3650v-4G v1 < 1.2.0 Build 20260630 Rel.83347 1.2.0 Build 20260630 Rel.83347
TP-Link Systems ER603WP-4G-Outdoor v1 < 1.0.2 Build 20260723 Rel.43271 1.0.2 Build 20260723 Rel.43271
TP-Link Systems DR3150 v1 < 1.0.1 Build 20260722 Rel.16854 1.0.1 Build 20260722 Rel.16854
TP-Link Systems ER701-5G-Outdoor v1 < 1.0.3 Build 20260723 Rel.40931 1.0.3 Build 20260723 Rel.40931
TP-Link Systems ER605W v2 < 2.0.4 Build 20260723 Rel.43763 2.0.4 Build 20260723 Rel.43763

Advisories 1

References