TP-Link Omada Vulnerabilities Exposed at Black Hat 2026

TP-Link has patched 15 vulnerabilities in its Omada network devices, particularly affecting the Zero-Touch Provisioning (ZTP) mechanism. Discovered by Forescout's Vedere Labs, these flaws could be exploited to achieve remote code execution (RCE) and compromise entire networks. The vulnerabilities include hard-coded cryptographic keys and issues with device onboarding that could allow attackers to impersonate devices and gain unauthorized access. The flaws are particularly critical as they can be chained with previously disclosed vulnerabilities (CVE-2025-7850 and CVE-2025-7851) to escalate attacks. TP-Link has released security advisories and updates, urging customers to apply patches and rotate credentials. Currently, there are no indications that these vulnerabilities are being actively exploited. Affected systems include various TP-Link products, including IP cameras and smart IoT devices.

Key Points: • TP-Link patched 15 vulnerabilities in its Omada network devices affecting ZTP. • Exploits could lead to remote code execution and network compromise. • Customers are urged to apply patches and rotate credentials immediately.