What’s Vulnerable › Vulnerabilities

CVE-2025-15628: Hardcoded Certificates in TP-Link Omada Device Communications

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-03 · updated 2026-09-29
• Weakness: CWE-798

Description

Affected Omada devices rely on embedded certificates that are shared across deployments to establish trust between controllers and managed devices. An attacker who obtains the embedded certificates may be able to impersonate trusted controllers or devices and intercept affected communications.

Affected products

• TP-Link Omada Ds1008X Firmware: all versions
• TP-Link Omada Ds1016G Firmware: all versions
• TP-Link Omada Ds1016Ge Firmware: all versions
• TP-Link Omada Ds1018Gmp Firmware: all versions
• TP-Link Omada Ds1024G Firmware: all versions
• TP-Link Omada Ds105G-M2 Firmware: all versions
• TP-Link Omada Ds105G Firmware: all versions
• TP-Link Omada Ds105Ge Firmware: all versions
• TP-Link Omada Ds105Gp Firmware: all versions
• TP-Link Omada Ds105X Firmware: all versions
• TP-Link Omada Ds106Gpp Firmware: all versions
• TP-Link Omada Ds106P Firmware: all versions
• TP-Link Omada Ds108G-M2 Firmware: all versions
• TP-Link Omada Ds108G Firmware: all versions
• TP-Link Omada Ds108Ge Firmware: all versions
• TP-Link Omada Ds108Gp Firmware: all versions
• TP-Link Omada Ds110Gmp Firmware: all versions
• TP-Link Omada Ds111P Firmware: all versions
• TP-Link Omada Eap610-Outdoor Firmware: all versions
• TP-Link Systems Inc. EAP610 v3: all versions
• TP-Link Omada Eap615-Wall Firmware: all versions
• TP-Link Omada Eap620Hd Firmware: all versions
• TP-Link Omada Eap660Hd Firmware: all versions
• TP-Link Omada ER605: all versions
• TP-Link Omada Er703Wp-4G-Outdoor Firmware: all versions
• TP-Link Omada Er706W-4G Firmware: all versions
• TP-Link Omada Er706W Firmware: all versions
• TP-Link Omada Er706Wp-4G Firmware: all versions
• TP-Link Omada Er707-M2 Firmware: all versions
• TP-Link Omada Er7206 Firmware: all versions

References

• https://www.omadanetworks.com/en/support/download/
• https://www.omadanetworks.com/us/support/download/
• https://www.tp-link.com/us/support/faq/5216/

Get alerted when CVE-2025-15628 or the next vulnerability affects your stack