What’s Vulnerable › Products

Tp-Link ER7206 Omada Gigabit VPN Router vulnerabilities

17 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your Tp-Link ER7206 Omada Gigabit VPN Router version is affected

Latest Tp-Link ER7206 Omada Gigabit VPN Router vulnerabilities

• CVE-2026-9033 — Unauthenticated Captive Portal Session Termination and Forced Logout in Omada Gateways (CVSS 4.3)
• CVE-2026-19683 — Unencrypted Credential Transmission in Omada Gateway Dynamic DNS Authentication in Omada Gateways (CVSS 7.4)
• CVE-2026-19586 — Pre-Authentication OS Command Injection in Omada Gateways on OpenVPN Server in Omada Gateways (CVSS 9.8)
• CVE-2025-9290 — Authentication Weakness on Omada Controllers, Gateways and Access Points (CVSS 5.9)
• CVE-2025-7851 — Unauthorized root access via debug functionality (CVSS 9.8)
• CVE-2025-7850 — Authenticated OS command execution (CVSS 7.2)
• CVE-2025-6542 — OS command injection in multiple parameters (CVSS 9.8)
• CVE-2025-6541 — OS command injection using information obtained from the web management interface (CVSS 8.8)
• CVE-2024-21827 — (CVSS 7.2)
• CVE-2023-47618 — (CVSS 7.2)
• CVE-2023-47617 — (CVSS 7.2)
• CVE-2023-47209 — (CVSS 7.2)
• CVE-2023-47167 — (CVSS 7.2)
• CVE-2023-46683 — (CVSS 7.2)
• CVE-2023-43482 — (CVSS 7.2)
• CVE-2023-42664 — (CVSS 7.2)
• CVE-2023-36498 — (CVSS 7.2)