Tp Link Omada Guard vulnerabilities
2 vulnerabilities
Known vulnerabilities in Tp Link Omada Guard, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2025-9292tp-link systems inc. · omada cloud controller +14 morePermissive Web Security Policy Allows Cross-Origin Access Control Bypass on Omada Cloud ControllersA permissive web security configuration may allow cross-origin restrictions enforced by modern browsers to be bypassed under specific circumstances. Exploitation requires the presence of an existing client-side injection vulnerability and user access to the affected web interface. Successful exploitation could allow unauthorized disclosure of sensitive information. Fixed in updated Omada Cloud Controller service versions deployed automatically by TP‑Link. No user action is required.EPSS0.39%HighCVE-2025-9293tp link systems inc. · omada app +27 moreInsufficient Certificate Validation in Multiple Mobile Applications Allows Man in the Middle InterceptionA vulnerability in the certificate validation logic may allow applications to accept untrusted or improperly validated server identities during TLS communication. An attacker in a privileged network position may be able to intercept or modify traffic if they can position themselves within the communication channel. Successful exploitation may compromise confidentiality, integrity, and availability of application data.EPSS0.24%