TP Link Systems Inc. Omada Controller vulnerabilities

3 vulnerabilities

Known vulnerabilities in TP Link Systems Inc. Omada Controller, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.3CVE-2025-9520tp-link systems inc.omada controller+1
EPSS score
0.45%
An IDOR vulnerability exists in Omada Controllers that allows an attacker with Administrator permissions to manipulate requests and potentially hijack the Owner account.5.3CVE-2025-9522tp-link systems inc.omada controller+1
EPSS score
0.28%
Blind Server-Side Request Forgery (SSRF) in Omada Controllers through webhook functionality, enabling crafted requests to internal services, which may lead to enumeration of information.6.5CVE-2025-9521tp-link systems inc.omada controller+1
EPSS score
0.32%
Password Confirmation Bypass vulnerability in Omada Controllers, allowing an attacker with a valid session token to bypass secondary verification, and change the user’s password without proper confirmation, leading to weakened account security.