EF
Product
Er7206 Firmware
17
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 12Medium 2Low 0
Watch
Add Er7206 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-19586 | 9.8 | Aug 20 | Pre-Authentication OS Command Injection in Omada Gateways on OpenVPN Server in Omada Gateways Affected: before 2.3.5 |
| CVE-2025-7851 | 9.8 | Oct 21 | Unauthorized root access via debug functionality Affected: before 2.2.2; 2.2.2 |
| CVE-2025-6542 | 9.8 | Oct 21 | OS command injection in multiple parameters Affected: before 2.2.2; 2.2.2 |
| CVE-2025-6541 | 8.8 | Oct 21 | OS command injection using information obtained from the web management interface Affected: before 2.2.2; 2.2.2 |
| CVE-2026-19683 | 7.4 | Aug 20 | Unencrypted Credential Transmission in Omada Gateway Dynamic DNS Authentication in Omada Gateways Affected: before 2.3.5 |
| CVE-2025-7850 | 7.2 | Oct 21 | Authenticated OS command execution Affected: before 2.2.2; 2.2.2 |
| CVE-2024-21827 | 7.2 | Jun 25 | A leftover debug code vulnerability exists in the cli_server debug functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.4.1 Build 20240117 Rel.57421 Affected: 1.4.1 |
| CVE-2023-47618 | 7.2 | Feb 6 | A post authentication command execution vulnerability exists in the web filtering functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591 Affected: 1.3.0 |
| CVE-2023-47617 | 7.2 | Feb 6 | A post authentication command injection vulnerability exists when configuring the web group member of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591 Affected: 1.3.0 |
| CVE-2023-47209 | 7.2 | Feb 6 | A post authentication command injection vulnerability exists in the ipsec policy functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591 Affected: 1.3.0 |
| CVE-2023-47167 | 7.2 | Feb 6 | A post authentication command injection vulnerability exists in the GRE policy functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591 Affected: 1.3.0 |
| CVE-2023-46683 | 7.2 | Feb 6 | A post authentication command injection vulnerability exists when configuring the wireguard VPN functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322… Affected: 1.3.0 |
| CVE-2023-43482 | 7.2 | Feb 6 | A command execution vulnerability exists in the guest resource functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591 Affected: 1.3.0 |
| CVE-2023-42664 | 7.2 | Feb 6 | A post authentication command injection vulnerability exists when setting up the PPTP global configuration of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322… Affected: 1.3.0 |
| CVE-2023-36498 | 7.2 | Feb 6 | A post-authentication command injection vulnerability exists in the PPTP client functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591 Affected: 1.3.0 |
| CVE-2025-9290 | 5.9 | Jan 22 | Authentication Weakness on Omada Controllers, Gateways and Access Points Affected: before 2.2.2 |
| CVE-2026-9033 | 4.3 | Aug 20 | Unauthenticated Captive Portal Session Termination and Forced Logout in Omada Gateways Affected: before 2.3.5 |
Showing 17