What’s Vulnerable › Vulnerabilities

CVE-2025-15630: Device Provisioning Race Condition in TP-Link Omada Adoption Workflow

• Severity: medium (CVSS 5.9 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-03 · updated 2026-09-29
• Weakness: CWE-362

Description

A race condition exists in the cloud-based Omada device adoption process when an attacker may be able to interact with the adoption workflow before a legitimate device completes registration, resulting in provisioning information being delivered to an attacker. Successful exploitation may allow disclosure of provisioning information intended for a legitimate device.

Affected products

• TP-Link Omada Ds1008X Firmware: all versions
• TP-Link Omada Ds1016G Firmware: all versions
• TP-Link Omada Ds1016Ge Firmware: all versions
• TP-Link Omada Ds1018Gmp Firmware: all versions
• TP-Link Omada Ds1024G Firmware: all versions
• TP-Link Omada Ds105G-M2 Firmware: all versions
• TP-Link Omada Ds105G Firmware: all versions
• TP-Link Omada Ds105Ge Firmware: all versions
• TP-Link Omada Ds105Gp Firmware: all versions
• TP-Link Omada Ds105X Firmware: all versions
• TP-Link Omada Ds106Gpp Firmware: all versions
• TP-Link Omada Ds106P Firmware: all versions
• TP-Link Omada Ds108G-M2 Firmware: all versions
• TP-Link Omada Ds108G Firmware: all versions
• TP-Link Omada Ds108Ge Firmware: all versions
• TP-Link Omada Ds108Gp Firmware: all versions
• TP-Link Omada Ds110Gmp Firmware: all versions
• TP-Link Omada Ds111P Firmware: all versions
• TP-Link Omada Eap610-Outdoor Firmware: all versions
• TP-Link Systems Inc. EAP610 v3: all versions
• TP-Link Omada Eap615-Wall Firmware: all versions
• TP-Link Omada Eap620Hd Firmware: all versions
• TP-Link Omada Eap660Hd Firmware: all versions
• TP-Link Omada ER605: all versions
• TP-Link Omada Er703Wp-4G-Outdoor Firmware: all versions
• TP-Link Omada Er706W-4G Firmware: all versions
• TP-Link Omada Er706W Firmware: all versions
• TP-Link Omada Er706Wp-4G Firmware: all versions
• TP-Link Omada Er707-M2 Firmware: all versions
• TP-Link Omada Er7206 Firmware: all versions

References

• https://www.omadanetworks.com/en/support/download/
• https://www.omadanetworks.com/us/support/download/
• https://www.tp-link.com/us/support/faq/5216/

Get alerted when CVE-2025-15630 or the next vulnerability affects your stack