What’s Vulnerable › Vulnerabilities

CVE-2025-9291: Improper Certificate Validation in TP-Link Omada Cloud Communications

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-03 · updated 2026-09-29
• Weakness: CWE-295

Description

A certification validation weakness exists in communication between affected Omada devices and cloud controllers. Certificate identity verification does not adequately validate that a presented certificate corresponds to the expected cloud controller hostname, which may allow certificate validation protections to be bypassed under specific conditions. Successful exploitation may allow interception or modification of communication between affected devices and cloud controllers.

Affected products

• TP-Link Omada Ds1008X Firmware: all versions
• TP-Link Omada Ds1016G Firmware: all versions
• TP-Link Omada Ds1016Ge Firmware: all versions
• TP-Link Omada Ds1018Gmp Firmware: all versions
• TP-Link Omada Ds1024G Firmware: all versions
• TP-Link Omada Ds105G-M2 Firmware: all versions
• TP-Link Omada Ds105G Firmware: all versions
• TP-Link Omada Ds105Ge Firmware: all versions
• TP-Link Omada Ds105Gp Firmware: all versions
• TP-Link Omada Ds105X Firmware: all versions
• TP-Link Omada Ds106Gpp Firmware: all versions
• TP-Link Omada Ds106P Firmware: all versions
• TP-Link Omada Ds108G-M2 Firmware: all versions
• TP-Link Omada Ds108G Firmware: all versions
• TP-Link Omada Ds108Ge Firmware: all versions
• TP-Link Omada Ds108Gp Firmware: all versions
• TP-Link Omada Ds110Gmp Firmware: all versions
• TP-Link Omada Ds111P Firmware: all versions
• TP-Link Omada Eap610-Outdoor Firmware: all versions
• TP-Link Systems Inc. EAP610 v3: all versions
• TP-Link Omada Eap615-Wall Firmware: all versions
• TP-Link Omada Eap620Hd Firmware: all versions
• TP-Link Omada Eap660Hd Firmware: all versions
• TP-Link Omada ER605: all versions
• TP-Link Omada Er703Wp-4G-Outdoor Firmware: all versions
• TP-Link Omada Er706W-4G Firmware: all versions
• TP-Link Omada Er706W Firmware: all versions
• TP-Link Omada Er706Wp-4G Firmware: all versions
• TP-Link Omada Er707-M2 Firmware: all versions
• TP-Link Omada Er7206 Firmware: all versions

References

• https://support.omadanetworks.com/en/download/firmware/
• https://support.omadanetworks.com/us/download/firmware/
• https://www.tp-link.com/us/support/faq/5216/

Get alerted when CVE-2025-9291 or the next vulnerability affects your stack