omada_software_controller vulnerabilities
CVEs whose affected-version data names the omada_software_controller package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-107795High· 7.5Omada Controller's MSP and OpenAPI certificate/private-key management APIs do not properly enforce administrative authorization, allowing an authenticated user to perform privileged certificate management operations. Successful exploit…
Omada Controller's MSP and OpenAPI certificate/private-key management APIs do not properly enforce administrative authorization, allowing an authenticated user to perform privileged certificate management operations. Successful exploit…
▾ TwilightTP-Link Systems Inc. · Omada Software ControllerEPSS 0.23%via NVD
CVE-2026-81531Medium· 6.9An information disclosure vulnerability has been identified in Omada Controller. An API endpoint intended for Controller initialization remains accessible after completion and may disclose account-related information to unauthenticated …
An information disclosure vulnerability has been identified in Omada Controller. An API endpoint intended for Controller initialization remains accessible after completion and may disclose account-related information to unauthenticated …
▾ SunlitTP-Link System Inc. · Omada Software ControllerEPSS 0.67%via NVD