Back Hkcert

TP

Hkcert • August 5, 2026

Multiple vulnerabilities were identified in TP-Link Omada Products. A remote attacker could exploit some of these vulnerabilities to trigger security restriction bypass, sensitive information disclosure and spoofing on the targeted system.

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Vulnerabilities Found in TP-Link Omada Products Forescout's Vedere Labs identified multiple vulnerabilities in TP-Link Omada products, including security restriction bypass and sensitive information disclosure. Attackers can exploit these vulnerabilities using a guessed serial number to retrieve device MAC addresses and models from the Omada cloud service. Specifically, serials beginning with 22460J500 and 224608100 correspond to ER605 and ER7206 routers, respectively. The vulnerabilities allow for potential spoofing and unauthorized access to sensitive information. Users are advised to apply the fixes issued by TP-Link to mitigate these risks. The vulnerabilities affect a range of Omada products, posing a significant threat to users' network security. 2 sources 58

Extracted Entities

TP

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CWE Weaknesses (1)