Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: TP-Link Systems Festa gateways, Omada Pro gateways, Omada gateways — support.omadanetworks.com/en/document/108456 Clear all filters
TI-2025-07175 CVE-2025-7851 · GHSA-q2rh-fc48-r3gw

Unauthorized root access via debug functionality

Priority MEDIUM 41

An attacker may obtain the root shell on the underlying OS system with the restricted conditions on Omada gateways.

CVSS 4.0HIGH 8.7 Adjacent network High privileges No interaction EPSS 0.00674 Published 2025-10-21 Fixed in ER8411 1.3.3, ER7412-M2 1.1.0 +11 CWE-269
TI-2025-07174 CVE-2025-7850 · GHSA-5r6g-vjqj-7mwg

Authenticated OS command execution in TP-Link Omada gateways

Priority MEDIUM 48

A command injection vulnerability may be exploited after the admin's authentication on the web portal on Omada gateways.

CVSS 4.0CRITICAL 9.3 Adjacent network High privileges No interaction EPSS 0.03308 Published 2025-10-21 Fixed in ER8411 1.3.3, ER7412-M2 1.1.0 +11 CWE-78