What’s Vulnerable › Vulnerabilities
CVE-2026-84941: Omada Controller XML External Entity (XXE) Injection in SAML IdP Metadata Parsing Leading to Arbitrary Local File Read
- Severity: medium (CVSS 6.9 v4.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.5% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-09-11 · updated 2026-09-11
- Weakness: CWE-611
Description
An information disclosure vulnerability in the SAML Single Sign-On (SSO) functionality of Omada Controller allows an authenticated user with SAML configuration privileges to access sensitive information due to insufficient validation of user-supplied SAML metadata. Successful exploitation could result in unauthorized disclosure of sensitive information.
Affected products
- TP-Link Systems Inc. OC2000 v1: before 1.41.11 Build 20260711 — fixed in 1.41.11 Build 20260711
- TP-Link Systems Inc. OC2000 v2: before 2.26.11 Build 20260711 — fixed in 2.26.11 Build 20260711
- TP-Link Systems Inc. OC200 v3: before 3.3.11 Build 20260711 — fixed in 3.3.11 Build 20260711
- TP-Link Systems Inc. OC220 v1: before 1.6.11 Build 20260711 — fixed in 1.6.11 Build 20260711
- TP-Link Systems Inc. OC220 v2: before 2.5.11 Build 20260711 — fixed in 2.5.11 Build 20260711
- TP-Link Systems Inc. OC300 v1: before 1.35.11 Build 20260711 — fixed in 1.35.11 Build 20260711
- TP-Link Systems Inc. OC400 v1: before 1.13.11 Build 20260711 — fixed in 1.13.11 Build 20260711
- TP-Link Systems Inc. Omada Software Controller (Linux): before 6.2.14.11 — fixed in 6.2.14.11
- TP-Link Systems Inc. Omada Software Controller (Windows): before 6.2.14.11 — fixed in 6.2.14.11
How to fix
Upgrade to a fixed version: TP-Link Systems Inc. OC2000 v1 1.41.11 Build 20260711; TP-Link Systems Inc. OC2000 v2 2.26.11 Build 20260711; TP-Link Systems Inc. OC200 v3 3.3.11 Build 20260711; TP-Link Systems Inc. OC220 v1 1.6.11 Build 20260711; TP-Link Systems Inc. OC220 v2 2.5.11 Build 20260711; TP-Link Systems Inc. OC300 v1 1.35.11 Build 20260711; TP-Link Systems Inc. OC400 v1 1.13.11 Build 20260711; TP-Link Systems Inc. Omada Software Controller (Linux) 6.2.14.11; TP-Link Systems Inc. Omada Software Controller (Windows) 6.2.14.11. Check the vendor advisory for mitigations.
References
- https://support.omadanetworks.com/en/document/133722/
- https://support.omadanetworks.com/en/download/software/omada-controller
- https://support.omadanetworks.com/us/download/software/omada-controller
- https://www.omadanetworks.com/en/support/download/
- https://www.omadanetworks.com/us/support/download/
Get alerted when CVE-2026-84941 or the next vulnerability affects your stack