Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: TP-Link Systems Omada Controller — support.omadanetworks.com/us/document/115200 Clear all filters
TI-2025-08727 CVE-2025-9522 · GHSA-grjh-4c57-c7g8

Server-side request forgery in TP-Link Omada Controller

Priority LOW 29

Blind Server-Side Request Forgery (SSRF) in Omada Controllers through webhook functionality, enabling crafted requests to internal services, which may lead to enumeration of information.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00288 Published 2026-01-26 Fixed in 6.0 CWE-918
TI-2025-08726 CVE-2025-9521 · GHSA-h7vf-8q5x-gvc3

Password Confirmation Bypass in Omada Controller

Priority LOW 11

Password Confirmation Bypass vulnerability in Omada Controllers, allowing an attacker with a valid session token to bypass secondary verification, and change the user’s password without proper confirmation, leading to we…

CVSS 4.0LOW 2.1 Network High privileges No interaction EPSS 0.00328 Published 2026-01-26 Fixed in 6.0 CWE-522
TI-2025-08725 CVE-2025-9520 · GHSA-q7gm-8832-99rj

IDOR Leading to Owner Account Hijacking in Omada Controller

Priority LOW 36

An IDOR vulnerability exists in Omada Controllers that allows an attacker with Administrator permissions to manipulate requests and potentially hijack the Owner account.

CVSS 4.0HIGH 8.3 Network High privileges No interaction EPSS 0.00439 Published 2026-01-26 Fixed in 6.0 CWE-639