TP Link Systems Inc. Omada Software Controller (Windows) vulnerabilities

1 vulnerability

Known vulnerabilities in TP Link Systems Inc. Omada Software Controller (Windows), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

MediumCVE-2026-84941tp-link systems inc · oc200 v3 +8 more1mo agoOmada Controller XML External Entity (XXE) Injection in SAML IdP Metadata Parsing Leading to Arbitrary Local File ReadAn information disclosure vulnerability in the SAML Single Sign-On (SSO) functionality of Omada Controller allows an authenticated user with SAML configuration privileges to access sensitive information due to insufficient validation of user-supplied SAML metadata. Successful exploitation could result in unauthorized disclosure of sensitive information.EPSS0.47%