Approved changes feed: RSS · Atom

cpe:2.3:o:tp-link:omada_controller:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorTp Link (0b2e1553-ac8b-5981-a60b-ca6c27ee3a6e)
ProductOmada Controller (db870e1b-9e3d-5d90-b861-bf8e3e1e7303)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-9522 vulnerable 2026-06-08 07:45:22.605213 Blind Server-Side Request Forgery (SSRF) in Omada Controller
Blind Server-Side Request Forgery (SSRF) in Omada Controllers through webhook functionality, enabling crafted requests to internal services, which may lead to enumeration of information.
Published: 2026-01-26T19:35:59.689Z
Updated: 2026-02-03T19:08:42.704Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-9521 vulnerable 2026-06-08 07:45:22.604860 Password Confirmation Bypass in Omada Controller
Password Confirmation Bypass vulnerability in Omada Controllers, allowing an attacker with a valid session token to bypass secondary verification, and change the user’s password without proper confirmation, leading to weakened account security.
Published: 2026-01-26T19:35:26.711Z
Updated: 2026-02-03T19:02:21.894Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-9520 vulnerable 2026-06-08 07:45:22.604441 IDOR Leading to Owner Account Hijacking in Omada Controller
An IDOR vulnerability exists in Omada Controllers that allows an attacker with Administrator permissions to manipulate requests and potentially hijack the Owner account.
Published: 2026-01-26T19:34:44.585Z
Updated: 2026-01-26T21:11:52.235Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.