HIGH🇵🇱 Wersja polska

CVE-2025-9291

CVSS 7.7v4.0pub. 2026-08-03upd. 2026-08-07

A certification validation weakness exists in communication between affected Omada devices and cloud controllers. Certificate identity verification does not adequately validate that a presented certificate corresponds to the expected cloud controller hostname, which may allow certificate validation protections to be bypassed under specific conditions. Successful exploitation may allow interception or modification of communication between affected devices and cloud controllers.

CVSS Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

  • Tp Link Omada Er605

    HW
    Tp-Link
    all versions

  • Tp Link Omada Er605 Firmware

    OS
    Tp-Link
    all versions

  • Tp Link Omada Er703wp 4g Outdoor

    HW
    Tp-Link
    all versions

  • Tp Link Omada Er703wp 4g Outdoor Firmware

    OS
    Tp-Link
    all versions

  • Tp Link Omada Er706w

    HW
    Tp-Link
    all versions

  • Tp Link Omada Er706w 4g

    HW
    Tp-Link
    all versions

  • Tp Link Omada Er706w 4g Firmware

    OS
    Tp-Link
    all versions

  • Tp Link Omada Er706w Firmware

    OS
    Tp-Link
    all versions

  • Tp Link Omada Er706wp 4g

    HW
    Tp-Link
    all versions

  • Tp Link Omada Er706wp 4g Firmware

    OS
    Tp-Link
    all versions

  • Tp Link Omada Er707 M2

    HW
    Tp-Link
    all versions

  • Tp Link Omada Er707 M2 Firmware

    OS
    Tp-Link
    all versions

  • Tp Link Omada Er7206

    HW
    Tp-Link
    all versions

  • Tp Link Omada Er7206 Firmware

    OS
    Tp-Link
    all versions

  • Tp Link Omada Er7412 M2

    HW
    Tp-Link
    all versions

  • Tp Link Omada Er7412 M2 Firmware

    OS
    Tp-Link
    all versions

  • Tp Link Omada Er8411

    HW
    Tp-Link
    all versions

  • Tp Link Omada Er8411 Firmware

    OS
    Tp-Link
    all versions

  • Tp Link Omada Fusion 2.5g

    HW
    Tp-Link
    all versions

  • Tp Link Omada Fusion 2.5g Firmware

    OS
    Tp-Link
    all versions

  • Tp Link Omada S6500 24g4xf

    HW
    Tp-Link
    all versions

  • Tp Link Omada S6500 24g4xf Firmware

    OS
    Tp-Link
    all versions

  • Tp Link Omada S6500 24gp4xf

    HW
    Tp-Link
    all versions

  • Tp Link Omada S6500 24gp4xf Firmware

    OS
    Tp-Link
    all versions

  • Tp Link Omada S6500 24mpp4y

    HW
    Tp-Link
    all versions

  • Tp Link Omada S6500 24mpp4y Firmware

    OS
    Tp-Link
    all versions

  • Tp Link Omada S6500 48g6xf

    HW
    Tp-Link
    all versions

  • Tp Link Omada S6500 48g6xf Firmware

    OS
    Tp-Link
    all versions

  • Tp Link Omada S6500 48gp6xf

    HW
    Tp-Link
    all versions

  • Tp Link Omada S6500 48gp6xf Firmware

    OS
    Tp-Link
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2024-25139CRITICAL10.0PL ✓same product

RCE z uprawnieniami root w TP-Link Omada ER605 via buffer overflow

CVE-2025-15628HIGH8.2PL ✓same product

Omada: współdzielone certyfikaty umożliwiają podszywanie się pod kontrolery

CVE-2026-1668HIGH7.7same product

The web interface on multiple Omada switches does not adequately validate certain external inputs, which may l...

CVE-2024-5228HIGH7.5same product

TP-Link Omada ER605 Comexe DDNS Response Handling Heap-based Buffer Overflow Remote Code Execution Vulnerabil...

CVE-2024-5227HIGH7.5same product

TP-Link Omada ER605 PPTP VPN username Command Injection Remote Code Execution Vulnerability. This vulnerabilit...