omada_software_controller_windows vulnerabilities
CVEs whose affected-version data names the omada_software_controller_windows package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-102298High· 7.5In Omada Controller MSP mode, the user-confirmation endpoint fails to enforce the required permission check
In Omada Controller MSP mode, the user-confirmation endpoint fails to enforce the required permission check. An authenticated user can supply a caller-controlled Identifier parameter to validate credentials for another account and receiv…
▾ TwilightTP-Link System Inc. · Omada Software Controller (Windows)EPSS 0.44%via NVD
CVE-2026-84941Medium· 6.9An information disclosure vulnerability in the SAML Single Sign-On (SSO) functionality of Omada Controller allows an authenticated user with SAML configuration privileges to access sensitive information due to insufficient validation of …
An information disclosure vulnerability in the SAML Single Sign-On (SSO) functionality of Omada Controller allows an authenticated user with SAML configuration privileges to access sensitive information due to insufficient validation of …
▾ SunlitTP-Link Systems Inc. · Omada Software Controller (Windows)EPSS 0.47%via NVD