Omada gateways
- Software type
- Network gateway
en
As of 11/08/2026, Omada gateways recorded 0 security vulnerabilities in the last 90 days, of which 0 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Omada gateways and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2025-9291Improper Certificate Validation in TP-Link Omada Cloud CommunicationsCVE-2025-15631Weak Credential Storage in TP-Link Omada DevicesCVE-2025-15630Device Provisioning Race Condition in TP-Link Omada Adoption WorkflowCVE-2025-15629Weak Session Key Generation in TP-Link Omada Adoption ProtocolCVE-2025-15628Hardcoded Certificates in TP-Link Omada Device Communications| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2025-9291Improper Certificate Validation in TP-Link Omada Cloud Communications | Exploitation statusNot exploited | FixYes |
| SeverityHigh |
CVE-2025-15631Weak Credential Storage in TP-Link Omada Devices | Exploitation statusNot exploited | FixYes | Published08/03/2026 | SeverityMedium |
|---|
CVE-2025-15630Device Provisioning Race Condition in TP-Link Omada Adoption Workflow | Exploitation statusNot exploited | FixYes | Published08/03/2026 | SeverityMedium |
|---|
CVE-2025-15629Weak Session Key Generation in TP-Link Omada Adoption Protocol | Exploitation statusNot exploited | FixYes | Published08/03/2026 | SeverityMedium |
|---|
CVE-2025-15628Hardcoded Certificates in TP-Link Omada Device Communications | Exploitation statusNot exploited | FixYes | Published08/03/2026 | SeverityHigh |
|---|
CVE-2025-15627Hardcoded Cryptographic Keys in TP-Link Omada Adoption Protocol Authentication | Exploitation statusNot exploited | FixYes | Published08/03/2026 | SeverityMedium |
|---|
CVE-2025-15544Weak Credential Protection During TP-Link Omada Device Adoption | Exploitation statusNot exploited | FixYes | Published08/03/2026 | SeverityMedium |
|---|
CVE-2025-7851Unauthorized root access via debug functionality | Exploitation statusNot exploited | FixYes | Published10/21/2025 | SeverityHigh |
|---|
CVE-2025-7850Authenticated OS command execution | Exploitation statusNot exploited | FixYes | Published10/21/2025 | SeverityCritical |
|---|
CVE-2025-6542OS command injection in multiple parameters | Exploitation statusNot exploited | FixYes | Published10/21/2025 | SeverityCritical |
|---|
CVE-2025-6541OS command injection using information obtained from the web management interface | Exploitation statusNot exploited | FixYes | Published10/21/2025 | SeverityHigh |
|---|
11 Results | Page 1 of 1