CVE-2025-9291
Medium
Description
A certification validation weakness exists in communication between affected Omada devices and cloud controllers. Certificate identity verification does not adequately validate that a presented certificate corresponds to the expected cloud controller hostname, which may allow certificate validation protections to be bypassed under specific conditions. Successful exploitation may allow interception or modification of communication between affected devices and cloud controllers.
SeverityMedium
CVSS6.5
Exploit probability—
Product
Tp-link Omada Fusion 2.5g Firmware
PublishedAug 3, 2026
First seenAug 3, 2026
Weakness typeCWE-295CWE-295
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tp-link omada_fusion_2.5g_firmware | No range specified | — |
| tp-link omada_er707-m2_firmware | No range specified | — |
| tp-link omada_er7206_firmware | No range specified | — |
| tp-link omada_er706w_firmware | No range specified | — |
| tp-link omada_er8411_firmware | No range specified | — |
| tp-link omada_er605_firmware | No range specified | — |
| tp-link omada_er7412-m2_firmware | No range specified | — |
| tp-link omada_er706w-4g_firmware | No range specified | — |
| tp-link omada_er703wp-4g-outdoor_firmware | No range specified | — |
| tp-link omada_er706wp-4g_firmware | No range specified | — |
| tp-link omada_s7500-24y4c_firmware | No range specified | — |
| tp-link omada_s7500-26xf6y_firmware | No range specified | — |
| tp-link omada_s6500-48mpp6y_firmware | No range specified | — |
| tp-link omada_s6500-24mpp4y_firmware | No range specified | — |
| tp-link omada_s6500-48gp6xf_firmware | No range specified | — |
| tp-link omada_s6500-48g6xf_firmware | No range specified | — |
| tp-link omada_s6500-24gp4xf_firmware | No range specified | — |
| tp-link omada_s6500-24g4xf_firmware | No range specified | — |
| tp-link omada_sx6632yf_firmware | No range specified | — |
| tp-link omada_sx3032f_firmware | No range specified | — |
| tp-link omada_sx3016f_firmware | No range specified | — |
| tp-link omada_sx3008f_firmware | No range specified | — |
| tp-link omada_sg3428xf_firmware | No range specified | — |
| tp-link omada_sx3832mpp_firmware | No range specified | — |
| tp-link omada_sx3832_firmware | No range specified | — |
| tp-link omada_sx3206hpp_firmware | No range specified | — |
| tp-link omada_sg3428xpp-m2_firmware | No range specified | — |
| tp-link omada_sg3428x-m2_firmware | No range specified | — |
| tp-link omada_sg3218xp-m2_firmware | No range specified | — |
| tp-link omada_sg3210xhp-m2_firmware | No range specified | — |
| tp-link omada_sg3210x-m2_firmware | No range specified | — |
| tp-link omada_sg2210xmp-m2_firmware | No range specified | — |
| tp-link omada_sg6654xhp_firmware | No range specified | — |
| tp-link omada_sg6654x_firmware | No range specified | — |
| tp-link omada_sg6428xhp_firmware | No range specified | — |
| tp-link omada_sg6428x_firmware | No range specified | — |
| tp-link omada_sg5452xmpp_firmware | No range specified | — |
| tp-link omada_sg5452x_firmware | No range specified | — |
| tp-link omada_sg5428xmpp_firmware | No range specified | — |
| tp-link omada_sg5428x_firmware | No range specified | — |
| tp-link omada_sg3452xmpp_firmware | No range specified | — |
| tp-link omada_sg3452xp_firmware | No range specified | — |
| tp-link omada_tl-sg3452x_firmware | No range specified | — |
| tp-link omada_sg3428xmpp_firmware | No range specified | — |
| tp-link omada_sg3428xmp_firmware | No range specified | — |
| tp-link omada_sg3428x_firmware | No range specified | — |
| tp-link omada_sg2005p-pd_firmware | No range specified | — |
| tp-link omada_sg3452p_firmware | No range specified | — |
| tp-link omada_sg3452_firmware | No range specified | — |
| tp-link omada_sg3428mp_firmware | No range specified | — |
| tp-link omada_sg3428_firmware | No range specified | — |
| tp-link omada_sg3210_firmware | No range specified | — |
| tp-link omada_tl-sg3210_firmware | No range specified | — |
| tp-link omada_sg2452lp_firmware | No range specified | — |
| tp-link omada_sg2428p_firmware | No range specified | — |
| tp-link omada_sg2428lp_firmware | No range specified | — |
| tp-link omada_sg2218p_firmware | No range specified | — |
| tp-link omada_sg2218_firmware | No range specified | — |
| tp-link omada_sg2016p_firmware | No range specified | — |
| tp-link omada_sg2210mp_firmware | No range specified | — |
| tp-link omada_sg2210p_firmware | No range specified | — |
| tp-link omada_sg2008p_firmware | No range specified | — |
| tp-link omada_sg2008_firmware | No range specified | — |
| tp-link omada_sg2206mp_firmware | No range specified | — |
| tp-link omada_es210xpp-m2_firmware | No range specified | — |
| tp-link omada_es210x-m2_firmware | No range specified | — |
| tp-link omada_es206xpp-m2_firmware | No range specified | — |
| tp-link omada_es206x-m2_firmware | No range specified | — |
| tp-link omada_es228gmp_firmware | No range specified | — |
| tp-link omada_es228gp_firmware | No range specified | — |
| tp-link omada_es224g_firmware | No range specified | — |
| tp-link omada_es220gp_firmware | No range specified | — |
| tp-link omada_es216g_firmware | No range specified | — |
| tp-link omada_es210gmp_firmware | No range specified | — |
| tp-link omada_es210gp_firmware | No range specified | — |
| tp-link omada_es208gp_firmware | No range specified | — |
| tp-link omada_es208g_firmware | No range specified | — |
| tp-link omada_es206gp_firmware | No range specified | — |
| tp-link omada_es205gp_firmware | No range specified | — |
| tp-link omada_es205g_firmware | No range specified | — |
| tp-link omada_es220gmp_firmware | No range specified | — |
| tp-link omada_es1024ge_firmware | No range specified | — |
| tp-link omada_ds1016ge_firmware | No range specified | — |
| tp-link omada_ds108ge_firmware | No range specified | — |
| tp-link omada_ds105ge_firmware | No range specified | — |
| tp-link omada_ds1008x_firmware | No range specified | — |
| tp-link omada_ds105x_firmware | No range specified | — |
| tp-link omada_ds108g-m2_firmware | No range specified | — |
| tp-link omada_ds105g-m2_firmware | No range specified | — |
| tp-link omada_ds1024g_firmware | No range specified | — |
| tp-link omada_ds1016g_firmware | No range specified | — |
| tp-link omada_ds110gmp_firmware | No range specified | — |
| tp-link omada_ds108g_firmware | No range specified | — |
| tp-link omada_ds106gpp_firmware | No range specified | — |
| tp-link omada_ds106p_firmware | No range specified | — |
| tp-link omada_ds105g_firmware | No range specified | — |
| tp-link omada_ds111p_firmware | No range specified | — |
| tp-link omada_ds1018gmp_firmware | No range specified | — |
| tp-link omada_ds108gp_firmware | No range specified | — |
| tp-link omada_ds105gp_firmware | No range specified | — |
| tp-link omada_ies210gpp_firmware | No range specified | — |
| tp-link omada_ies206gpp_firmware | No range specified | — |
| tp-link omada_ies208g_firmware | No range specified | — |
| tp-link omada_ies206g_firmware | No range specified | — |
| tp-link omada_eap660hd_firmware | No range specified | — |
| tp-link omada_eap620hd_firmware | No range specified | — |
| tp-link omada_eap610_firmware | No range specified | — |
| tp-link omada_eap615-wall_firmware | No range specified | — |
| tp-link omada_eap610-outdoor_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.