Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

High7.5Omada Controller's MSP and OpenAPI certificate/private-key management APIs do not properly enforce administrative authorization, allowing an authenticated user to perf…CVE-2026-107795 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%Oct 14, 2026
High7.5In Omada Controller MSP mode, the user-confirmation endpoint fails to enforce the required permission check.CVE-2026-102298 · TP-Link System Inc. · Omada Software Controller (Windows) · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · Microsoft, TP-LinkEPSS 0.4%Oct 14, 2026
High7.7The web interface on multiple Omada switches does not adequately validate certain external inputs, which may lead to out-of-bound memory access when processing crafted requests.CVE-2026-1668 · tp-link · omada sg2005p-pd firmware · CVE.org · FIRST EPSS · NIST NVD · TP-LinkEPSS 1.0%Mar 13, 2026
Medium6.9A denial-of-service (DoS) vulnerability was identified in Omada EAP610 v3.CVE-2025-7375 · tp-link · omada eap610 firmware · CVE.org · FIRST EPSS · NIST NVD · TP-LinkEPSS 0.2%Mar 5, 2026