CVE-2026-19683Unencrypted Credential Transmission in Omada Gateway Dynamic DNS Authentication in Omada Gateways
Updated under an hour ago ()
Does this affect you?
It affects TP-Link Systems Inc. ER7212PC v2 and 36 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
A vulnerability exists in the Dynamic DNS (DDNS) functionality of TP-Link Omada Gateways. During communication with a third-party DDNS service, authentication credentials are transmitted over an unencrypted channel. An attacker who can observe or manipulate traffic between an affected device and the DDNS service may obtain sensitive authentication information or interfere with DDNS update operations. Exploitation requires DDNS to be configured, communication with an external DDNS service, and attacker visibility or control of the relevant network path. Successful exploitation may result in disclosure of DDNS account credentials, unauthorized access to DDNS management functionality, or modification of DNS records associated with the affected deployment.
- CVSS
- 6.3 MEDIUM (v4.0, CNA)CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
- Weakness (CWE)
- CWE-319
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- TPLink
- NVD analysis
- Analyzed
- Record last updated
- Aug 20, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
TP-Link Systems Inc. ER7212PC v2 tp_link_systems:er7212pc_v2 (from the name) | before 2.4.3 Build 20260722 Rel.40250 | CNA record |
TP-Link Systems Inc. ER605 v2 tp_link_systems:er605_v2 (from the name) | before 2.4.4 Build 20260630 Rel.14398 | CNA record |
TP-Link Systems Inc. ER7206 v2 tp_link_systems:er7206_v2 (from the name) | before 2.3.5 Build 20260625 Rel.43136 | CNA record |
TP-Link Systems Inc ER7406 v1 tp_link_systems:er7406_v1 (from the name) | before 1.3.4 Build 20260625 Rel.43136 | CNA record |
TP-Link Systems Inc. ER707-M2 v1 tp_link_systems:er707_m2_v1 (from the name) | before 1.4.4 Build 20260625 Rel.43063 | CNA record |
TP-Link Systems Inc ER7412-M2 v1 tp_link_systems:er7412_m2_v1 (from the name) | before 1.2.0 Build 20260630 Rel.82947 | CNA record |
TP-Link Systems Inc. ER8411 v1 tp_link_systems:er8411_v1 (from the name) | before 1.4.1 Build 20260708 Rel.64832 | CNA record |
TP-Link Systems Inc. ER706W v1 tp_link_systems:er706w_v1 (from the name) | before 1.2.11 Build 20260723 Rel.41567 | CNA record |
TP-Link Systems Inc. v1 tp_link_systems:v1 (from the name) | before 1.2.6 Build 20260723 Rel.41321 | CNA record |
TP-Link Systems Inc. ER706W-4G v2 tp_link_systems:er706w_4g_v2 (from the name) | before 2.1.11 Build 20260723 Rel.41624 | CNA record |
TP-Link Systems Inc. ER706WP-4G v1 tp_link_systems:er706wp_4g_v1 (from the name) | before 1.1.11 Build 20260723 Rel.41624 | CNA record |
TP-Link Systems Inc. ER703WP-4G-Outdoor v1 tp_link_systems:er703wp_4g_outdoor_v1 (from the name) | before 1.1.7 Build 20260723 Rel.41712 | CNA record |
TP-Link Systems Inc. DR3220v-4G v1 tp_link_systems:dr3220v_4g_v1 (from the name) | before 1.2.0 Build 20260630 Rel.82652 | CNA record |
TP-Link Systems Inc. DR3650v v1 tp_link_systems:dr3650v_v1 (from the name) | before 1.2.0 Build 20260630 Rel.83311 | CNA record |
TP-Link Systems Inc. DR3650v-4G v1 tp_link_systems:dr3650v_4g_v1 (from the name) | before 1.2.0 Build 20260630 Rel.83347 | CNA record |
TP-Link Systems Inc. ER603WP-4G-Outdoor v1 tp_link_systems:er603wp_4g_outdoor_v1 (from the name) | before 1.0.2 Build 20260723 Rel.43271 | CNA record |
TP-Link Systems Inc. DR3150 v1 tp_link_systems:dr3150_v1 (from the name) | before 1.0.1 Build 20260722 Rel.16854 | CNA record |
TP-Link Systems Inc. ER701-5G-Outdoor v1 tp_link_systems:er701_5g_outdoor_v1 (from the name) | before 1.0.3 Build 20260723 Rel.40931 | CNA record |
TP-Link Systems Inc. ER605W v2 tp_link_systems:er605w_v2 (from the name) | before 2.0.4 Build 20260723 Rel.43763 | CNA record |
tp-link er7212pc_firmware tp-link:er7212pc_firmware | before 2.4.3 | NVD |
tp-link er605_firmware tp-link:er605_firmware | before 2.4.4 | NVD |
tp-link er7206_firmware tp-link:er7206_firmware | before 2.3.5 | NVD |
tp-link er7406_firmware tp-link:er7406_firmware | before 1.3.4 | NVD |
tp-link er707-m2_firmware tp-link:er707-m2_firmware | before 1.4.4 | NVD |
tp-link er7412-m2_firmware tp-link:er7412-m2_firmware | before 1.2.0 | NVD |
tp-link er8411_firmware tp-link:er8411_firmware | before 1.4.1 | NVD |
tp-link er706w_firmware tp-link:er706w_firmware | before 1.2.11 | NVD |
tp-link er706w-4g_firmware tp-link:er706w-4g_firmware | before 1.2.6; before 2.1.11 | NVD |
tp-link er706wp-4g_firmware tp-link:er706wp-4g_firmware | before 1.1.11 | NVD |
tp-link er703wp-4g-outdoor_firmware tp-link:er703wp-4g-outdoor_firmware | before 1.1.7 | NVD |
tp-link dr3220v-4g_firmware tp-link:dr3220v-4g_firmware | before 1.2.0 | NVD |
tp-link dr3650v_firmware tp-link:dr3650v_firmware | before 1.2.0 | NVD |
tp-link dr3650v-4g_firmware tp-link:dr3650v-4g_firmware | before 1.2.0 | NVD |
tp-link er603wp-4g-outdoor_firmware tp-link:er603wp-4g-outdoor_firmware | before 1.0.2 | NVD |
tp-link dr3150_firmware tp-link:dr3150_firmware | before 1.0.1 | NVD |
tp-link er701-5g-outdoor_firmware tp-link:er701-5g-outdoor_firmware | before 1.0.3 | NVD |
tp-link er605w_firmware tp-link:er605w_firmware | before 2.0.4 | NVD |
References
- https://www.omadanetworks.com/en/support/download/patch, product
- https://www.omadanetworks.com/us/support/download/patch, product
- https://www.tp-link.com/us/support/faq/5256/vendor-advisory
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.