Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: TP-Link Systems Omada Cloud Controller, Omada Software Controller — support.omadanetworks.com/us/document/114950 Clear all filters
TI-2025-08515 CVE-2025-9290 · GHSA-gwgw-6q3h-28pg

Authentication Weakness on Omada Controllers, Gateways and Access Points

Priority LOW 26

An authentication weakness was identified in Omada Controllers, Gateways and Access Points, controller-device adoption due to improper handling of random values.

CVSS 4.0MEDIUM 6.0 Adjacent network No auth No interaction EPSS 0.00222 Published 2026-01-22 Fixed in 6.0.0.24, 6.0.0.100 +27 CWE-760
TI-2025-08514 CVE-2025-9289 · GHSA-fh4h-xf29-c53g

Cross-Site Scripting (XSS) on Omada Controllers

Priority LOW 25

A Cross-Site Scripting (XSS) vulnerability was identified in a parameter in Omada Controllers due to improper input sanitization.

CVSS 4.0MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00199 Published 2026-01-22 Fixed in 6.0.0.24, 6.0.0.34 +1 CWE-79