TP Link Systems Inc. Oc220 V2 vulnerabilities

2 vulnerabilities

Known vulnerabilities in TP Link Systems Inc. Oc220 V2, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.9CVE-2026-84941tp-link systems incoc200 v3+8
EPSS score
0.47%
An information disclosure vulnerability in the SAML Single Sign-On (SSO) functionality of Omada Controller allows an authenticated user with SAML configuration privileges to access sensitive information due to insufficient validation of user-supplied SAML metadata. Successful exploitation could result in unauthorized disclosure of sensitive information.6.9CVE-2026-81531tp link systems inc.oc200 v2+7
EPSS score
0.67%
An information disclosure vulnerability has been identified in Omada Controller.  An API endpoint intended for Controller initialization remains accessible after completion and may disclose account-related information to unauthenticated remote users.  Successful exploitation may allow an attacker to remote query the affected endpoint that may facilitate user enumeration and subsequent attacks targeting administrative accounts.