Medium 5.9Published Jan 23, 2026

CVE-2025-9290An authentication weakness was identified in Omada Controllers, Gateways and Access Points, controller-device adoption due to improper handling of random values.

Updated under an hour ago (2026-10-19 08:50 UTC)

Does this affect you?

It affects tp-link omada_controller and 55 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for tp-link omada_controller

Exploited in the last 30 days

An authentication weakness was identified in Omada Controllers, Gateways and Access Points, controller-device adoption due to improper handling of random values. Exploitation requires advanced network positioning and allows an attacker to intercept adoption traffic and forge valid authentication through offline precomputation, potentially exposing sensitive information and compromising confidentiality.

CVSS: 5.9 MEDIUM (v3.1, NVD)CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness (CWE): CWE-760
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Not given
NVD analysis: Analyzed
Record last updated: Oct 7, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

tp-link omada_controller tp-link:omada_controller	before 6.0.0.24; before 6.0.0.100; before 6.0.0.34; before 5.15.24	NVD
tp-link oc200_firmware tp-link:oc200_firmware	before 1.37.9; before 2.22.9	NVD
tp-link oc220_firmware tp-link:oc220_firmware	before 1.1.3; all versions	NVD
tp-link oc300_firmware tp-link:oc300_firmware	before 1.31.9	NVD
tp-link oc400_firmware tp-link:oc400_firmware	before 1.9.9	NVD
tp-link er605_firmware tp-link:er605_firmware	before 2.3.2	NVD
tp-link er7206_firmware tp-link:er7206_firmware	before 2.2.2	NVD
tp-link er7406_firmware tp-link:er7406_firmware	before 1.2.2	NVD
tp-link er707-m2_firmware tp-link:er707-m2_firmware	before 1.3.1	NVD
tp-link er7412-m2_firmware tp-link:er7412-m2_firmware	before 1.1.0	NVD
tp-link er8411_firmware tp-link:er8411_firmware	before 1.3.5	NVD
tp-link er706w_firmware tp-link:er706w_firmware	before 1.2.1	NVD
tp-link er706w-4g_firmware tp-link:er706w-4g_firmware	before 1.2.1; before 2.1.0	NVD
tp-link er706wp-4g_firmware tp-link:er706wp-4g_firmware	before 1.1.0	NVD
tp-link er703wp-4g-outdoor_firmware tp-link:er703wp-4g-outdoor_firmware	before 1.1.0	NVD
tp-link dr3220v-4g_firmware tp-link:dr3220v-4g_firmware	before 1.1.0	NVD
tp-link dr3650v-4g_firmware tp-link:dr3650v-4g_firmware	before 1.1.0	NVD
tp-link dr3650v_firmware tp-link:dr3650v_firmware	before 1.1.0	NVD
tp-link er701-5g-outdoor_firmware tp-link:er701-5g-outdoor_firmware	before 1.0.0	NVD
tp-link er605w_firmware tp-link:er605w_firmware	before 2.0.2	NVD
tp-link er7212pc_firmware tp-link:er7212pc_firmware	before 2.2.1	NVD
tp-link fr365_firmware tp-link:fr365_firmware	before 1.1.10	NVD
tp-link g36w-4g_firmware tp-link:g36w-4g_firmware	before 1.1.5	NVD
tp-link eap655-wall_firmware tp-link:eap655-wall_firmware	before 1.6.2	NVD
tp-link eap660_hd_firmware tp-link:eap660_hd_firmware	before 1.6.1	NVD
tp-link eap620_hd_firmware tp-link:eap620_hd_firmware	before 1.6.1	NVD
tp-link eap610-outdoor_firmware tp-link:eap610-outdoor_firmware	before 1.6.1	NVD
tp-link eap610_firmware tp-link:eap610_firmware	before 1.6.1	NVD
tp-link eap623-outdoor_hd_firmware tp-link:eap623-outdoor_hd_firmware	before 1.6.1	NVD
tp-link eap625-outdoor_hd_firmware tp-link:eap625-outdoor_hd_firmware	before 1.6.1	NVD
tp-link eap772_firmware tp-link:eap772_firmware	before 1.3.2; before 1.1.2	NVD
tp-link eap772-outdoor_firmware tp-link:eap772-outdoor_firmware	before 1.3.2	NVD
tp-link eap770_firmware tp-link:eap770_firmware	before 1.3.2	NVD
tp-link eap723_firmware tp-link:eap723_firmware	before 1.3.2; before 1.1.2	NVD
tp-link eap773_firmware tp-link:eap773_firmware	before 1.1.2	NVD
tp-link eap783_firmware tp-link:eap783_firmware	before 1.1.2	NVD
tp-link eap787_firmware tp-link:eap787_firmware	before 1.1.2	NVD
tp-link eap720_firmware tp-link:eap720_firmware	before 1.1.2	NVD
tp-link eap725-wall_firmware tp-link:eap725-wall_firmware	before 1.1.2	NVD
tp-link eap215_bridge_kit_firmware tp-link:eap215_bridge_kit_firmware	before 1.1.4	NVD
tp-link eap211_bridge_kit_firmware tp-link:eap211_bridge_kit_firmware	before 1.1.4	NVD
tp-link beam_bridge_5_ur_firmware tp-link:beam_bridge_5_ur_firmware	before 1.1.5	NVD
tp-link eap603gp-desktop_firmware tp-link:eap603gp-desktop_firmware	before 1.1.0	NVD
tp-link eap615gp-wall_firmware tp-link:eap615gp-wall_firmware	before 1.1.0	NVD
tp-link eap625gp-wall_firmware tp-link:eap625gp-wall_firmware	before 1.1.0	NVD
tp-link eap610gp-desktop_firmware tp-link:eap610gp-desktop_firmware	before 1.1.0	NVD
tp-link eap650gp-desktop_firmware tp-link:eap650gp-desktop_firmware	before 1.0.1	NVD
tp-link eap653_firmware tp-link:eap653_firmware	before 1.3.3	NVD
tp-link eap650-outdoor_firmware tp-link:eap650-outdoor_firmware	before 1.3.3	NVD
tp-link eap230-wall_firmware tp-link:eap230-wall_firmware	before 3.3.1	NVD
tp-link eap235-wall_firmware tp-link:eap235-wall_firmware	before 3.3.1	NVD
tp-link eap603-outdoor_firmware tp-link:eap603-outdoor_firmware	before 1.5.1	NVD
tp-link eap653_ur_firmware tp-link:eap653_ur_firmware	before 1.4.2	NVD
tp-link eap650-desktop_firmware tp-link:eap650-desktop_firmware	before 1.1.0	NVD
tp-link eap615-wall_firmware tp-link:eap615-wall_firmware	before 1.1.0	NVD
tp-link eap100-bridge_kit_firmware tp-link:eap100-bridge_kit_firmware	before 1.0.3	NVD

References

https://support.omadanetworks.com/en/download/product
https://support.omadanetworks.com/us/document/114950/vendor-advisory
https://support.omadanetworks.com/us/download/product

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.