https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T05:12:59.692163+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-9290 CVE-2025-9290 — Authentication Weakness on Omada Controllers, Gateways and Access Points 2026-10-06T05:13:00.264277+00:00

Affected: TP-Link Systems Inc. Omada Software Controller, TP-Link Systems Inc. Omada Cloud Controller, TP-Link Systems Inc. Omada Hardware Controller (OC200, OC300, OC400), TP-Link Systems Inc. Omada Hardware Controller OC220, TP-Link Systems Inc. Omada Gateway (ER605 v2.0), TP-Link Systems Inc. Omada Gateway (ER7206 v2.0), TP-Link Systems Inc. Omada Gateway (ER7406, ER706W, ER706-4G), TP-Link Systems Inc. Omada Gateway (ER707-M2, ER-8411), TP-Link Systems Inc. Omada Gateway (ER7412-M2, ER706WP-4G, ER703WP-4G-Outdoor, DR3220v-4G, DR3650v, DR3650v-4G), TP-Link Systems Inc. Omada Gateway (ER8411) and 20 more

An authentication weakness was identified in Omada Controllers, Gateways and Access Points, controller-device adoption due to improper handling of random values. Exploitation requires advanced network positioning and allows an attacker to intercept adoption traffic and forge valid authentication through offline precomputation, potentially exposing sensitive information and compromising confidentiality.