Login Request a demo
OC
Product
Omada Controller
by Tp-link · last CVE Jan 26, 2026
6
CVEs
0
On KEV
6.8
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 0High 0Medium 6Low 0
Severity
All severities6Critical0High0Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Omada Controller to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-9520
6.8
0%
Jan 26
IDOR Leading to Owner Account Hijacking in Omada Controller
Affected: before 6.0
CVE-2025-9521
6.5
0%
Jan 26
Password Confirmation Bypass in Omada Controller
Affected: before 6.0
CVE-2025-9290
5.9
0%
Jan 22
Authentication Weakness on Omada Controllers, Gateways and Access Points
Affected: before 6.0.0.24; before 6.0.0.100; before 6.0.0.34; before 5.15.24
CVE-2020-12475
5.5
1%
May 4
TP-Link Omada Controller Software 3.2.6 allows Directory Traversal for reading arbitrary files via com.tp_link.eap.web.portal.PortalController.getAdvertiseFile in…
Affected: 3.2.6
CVE-2025-9522
5.3
0%
Jan 26
Blind Server-Side Request Forgery (SSRF) in Omada Controller
Affected: before 6.0
CVE-2025-9289
4.7
0%
Jan 22
Cross-Site Scripting (XSS) on Omada Controllers
Affected: before 6.0.0.24; before 6.0.0.100; before 6.0.0.34
Showing 6