Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Omada gateways — Vulnerabilities & Security Advisories 11

All 11 CVE vulnerabilities found in Omada gateways, with AI-generated Chinese analysis, references, and POCs.

Vendor: TP-Link Systems Inc.

CVE ID Title CVSS Severity Published
CVE-2025-15631 Weak Credential Storage in TP-Link Omada Devices CWE-759 5.7 Medium 2026-08-03
CVE-2025-15630 Device Provisioning Race Condition in TP-Link Omada Adoption Workflow CWE-362 5.8 Medium 2026-08-03
CVE-2025-15629 Weak Session Key Generation in TP-Link Omada Adoption Protocol CWE-331 6.9 Medium 2026-08-03
CVE-2025-15628 Hardcoded Certificates in TP-Link Omada Device Communications CWE-798 8.2 High 2026-08-03
CVE-2025-15627 Hardcoded Cryptographic Keys in TP-Link Omada Adoption Protocol Authentication CWE-321 6.9 Medium 2026-08-03
CVE-2025-15544 Weak Credential Protection During TP-Link Omada Device Adoption CWE-759 6.9 Medium 2026-08-03
CVE-2025-9291 Improper Certificate Validation in TP-Link Omada Cloud Communications CWE-295 7.7 High 2026-08-03
CVE-2025-7851 Unauthorized root access via debug functionality 8.4AI High AI 2025-10-21
CVE-2025-7850 Authenticated OS command execution CWE-78 7.2AI High AI 2025-10-21
CVE-2025-6542 OS command injection in multiple parameters CWE-78 9.8AI Critical AI 2025-10-21
CVE-2025-6541 OS command injection using information obtained from the web management interface CWE-78 7.2AI High AI 2025-10-21

All 11 known CVE vulnerabilities affecting Omada gateways with full Chinese analysis, references, and POCs where available.