What’s Vulnerable › Vulnerabilities

CVE-2025-15631: Weak Credential Storage in TP-Link Omada Devices

• Severity: medium (CVSS 5.9 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-03 · updated 2026-09-29
• Weakness: CWE-759

Description

A cryptographic weakness exists in affected Omada devices where site credentials are protected using a legacy hashing algorithm that does not provide sufficient protection. An attacker who obtains access to stored credential data may be able to recover valid credentials to gain unauthorized access to affected devices or management environments.

Affected products

• TP-Link Omada Ds1008X Firmware: all versions
• TP-Link Omada Ds1016G Firmware: all versions
• TP-Link Omada Ds1016Ge Firmware: all versions
• TP-Link Omada Ds1018Gmp Firmware: all versions
• TP-Link Omada Ds1024G Firmware: all versions
• TP-Link Omada Ds105G-M2 Firmware: all versions
• TP-Link Omada Ds105G Firmware: all versions
• TP-Link Omada Ds105Ge Firmware: all versions
• TP-Link Omada Ds105Gp Firmware: all versions
• TP-Link Omada Ds105X Firmware: all versions
• TP-Link Omada Ds106Gpp Firmware: all versions
• TP-Link Omada Ds106P Firmware: all versions
• TP-Link Omada Ds108G-M2 Firmware: all versions
• TP-Link Omada Ds108G Firmware: all versions
• TP-Link Omada Ds108Ge Firmware: all versions
• TP-Link Omada Ds108Gp Firmware: all versions
• TP-Link Omada Ds110Gmp Firmware: all versions
• TP-Link Omada Ds111P Firmware: all versions
• TP-Link Omada Eap610-Outdoor Firmware: all versions
• TP-Link Systems Inc. EAP610 v3: all versions
• TP-Link Omada Eap615-Wall Firmware: all versions
• TP-Link Omada Eap620Hd Firmware: all versions
• TP-Link Omada Eap660Hd Firmware: all versions
• TP-Link Omada ER605: all versions
• TP-Link Omada Er703Wp-4G-Outdoor Firmware: all versions
• TP-Link Omada Er706W-4G Firmware: all versions
• TP-Link Omada Er706W Firmware: all versions
• TP-Link Omada Er706Wp-4G Firmware: all versions
• TP-Link Omada Er707-M2 Firmware: all versions
• TP-Link Omada Er7206 Firmware: all versions

References

• https://www.omadanetworks.com/en/support/download/
• https://www.omadanetworks.com/us/support/download/
• https://www.tp-link.com/us/support/faq/5216/

Get alerted when CVE-2025-15631 or the next vulnerability affects your stack