CVE-2026-1668
Critical
Description
The web interface on multiple Omada switches does not adequately validate certain external inputs, which may lead to out-of-bound memory access when processing crafted requests. Under specific conditions, this flaw may result in unintended command execution.<br>An unauthenticated attacker with network access to the affected interface may cause memory corruption, service instability, or information disclosure. Successful exploitation may allow remote code execution or denial-of-service.
SeverityCritical
CVSS9.8
Exploit probability—
Product
Tp-link Omada Sg2005p-pd Firmware
PublishedMar 13, 2026
First seenMar 13, 2026
Weakness typeCWE-20Improper input validation
How to fix
Update
- tp-link omada_sg2005p-pd_firmware1.0.19 or later
- tp-link omada_sg2008_firmware4.20.17, 4.30.1 or later
- tp-link omada_sg2008p_firmware3.20.17, 3.30.1 or later
- tp-link omada_sg2016p_firmware1.20.17, 1.30.1 or later
- tp-link omada_sg2210mp_firmware4.20.18, 5.0.15, 5.20.1 or later
- tp-link omada_sg2210p_firmware5.20.18, 5.30.1 or later
- tp-link omada_sg2210xmp-m2_firmware1.0.19 or later
- tp-link omada_sg2218_firmware1.20.17, 1.30.1 or later
- tp-link omada_sg2218p_firmware1.20.17, 2.0.14, 2.20.2 or later
- tp-link omada_sg2428lp_firmware1.0.13 or later
- tp-link omada_sg2428p_firmware5.20.20, 5.30.16 or later
- tp-link omada_sg2452lp_firmware1.0.13 or later
Patches
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tp-link omada_sg2005p-pd_firmware | 1.0.0 ≤ v < 1.0.19 | 1.0.19 |
| tp-link omada_sg2008_firmware | 4.20.0 ≤ v < 4.20.17, 4.30.0 ≤ v < 4.30.1 | 4.20.17, 4.30.1 |
| tp-link omada_sg2008p_firmware | 3.20.0 ≤ v < 3.20.17, 3.30.0 ≤ v < 3.30.1 | 3.20.17, 3.30.1 |
| tp-link omada_sg2016p_firmware | 1.20.0 ≤ v < 1.20.17, 1.30.0 ≤ v < 1.30.1 | 1.20.17, 1.30.1 |
| tp-link omada_sg2210mp_firmware | 4.20.0 ≤ v < 4.20.18, 5.0.0 ≤ v < 5.0.15, 5.20.0 ≤ v < 5.20.1 | 4.20.18, 5.0.15, 5.20.1 |
| tp-link omada_sg2210p_firmware | 5.20.0 ≤ v < 5.20.18, 5.30.0 ≤ v < 5.30.1 | 5.20.18, 5.30.1 |
| tp-link omada_sg2210xmp-m2_firmware | 1.0.0 ≤ v < 1.0.19 | 1.0.19 |
| tp-link omada_sg2218_firmware | 1.20.0 ≤ v < 1.20.17, 1.30.0 ≤ v < 1.30.1 | 1.20.17, 1.30.1 |
| tp-link omada_sg2218p_firmware | 1.20.0 ≤ v < 1.20.17, 2.0.0 ≤ v < 2.0.14, 2.20.0 ≤ v < 2.20.2 | 1.20.17, 2.0.14, 2.20.2 |
| tp-link omada_sg2428lp_firmware | 1.0.0 ≤ v < 1.0.13 | 1.0.13 |
| tp-link omada_sg2428p_firmware | 5.20.0 ≤ v < 5.20.20, 5.30.0 ≤ v < 5.30.16 | 5.20.20, 5.30.16 |
| tp-link omada_sg2452lp_firmware | 1.0.0 ≤ v < 1.0.13 | 1.0.13 |
| tp-link omada_sg3210_firmware | 3.20.0 ≤ v < 3.20.17, 3.30.0 ≤ v < 3.30.1 | 3.20.17, 3.30.1 |
| tp-link omada_sg3210xhp-m2_firmware | 3.0.0 ≤ v < 3.0.21 | 3.0.21 |
| tp-link omada_sg3210x-m2_firmware | 1.20.0 ≤ v < 1.20.1 | 1.20.1 |
| tp-link omada_sg3218xp-m2_firmware | 1.0.0 ≤ v < 1.0.19 | 1.0.19 |
| tp-link omada_sg3428_firmware | 2.30.0 ≤ v < 2.30.16, 2.40.0 ≤ v < 2.40.1 | 2.30.16, 2.40.1 |
| tp-link omada_sg3428mp_firmware | 6.20.0 ≤ v < 6.20.20, 6.30.0 ≤ v < 6.30.1 | 6.20.20, 6.30.1 |
| tp-link omada_sg3428x_firmware | 1.30.0 ≤ v < 1.30.17, 1.40.0 ≤ v < 1.40.1 | 1.30.17, 1.40.1 |
| tp-link omada_sg3428xf_firmware | 1.20.0 ≤ v < 1.20.16, 1.30.0 ≤ v < 1.30.1 | 1.20.16, 1.30.1 |
| tp-link omada_sg3428x-m2_firmware | 1.20.0 ≤ v < 1.20.18 | 1.20.18 |
| tp-link omada_sg3428xmp_firmware | 3.20.0 ≤ v < 3.20.21, 3.30.0 ≤ v < 3.30.1 | 3.20.21, 3.30.1 |
| tp-link omada_sg3428xmpp_firmware | 1.0.0 ≤ v < 1.0.16, 1.20.0 ≤ v < 1.20.1 | 1.0.16, 1.20.1 |
| tp-link omada_sg3428xpp-m2_firmware | 1.20.0 ≤ v < 1.20.19 | 1.20.19 |
| tp-link omada_sg3452_firmware | 1.20.0 ≤ v < 1.20.17, 1.30.0 ≤ v < 1.30.1 | 1.20.17, 1.30.1 |
| tp-link omada_sg3452p_firmware | 3.30.0 ≤ v < 3.30.17, 3.40.0 ≤ v < 3.40.1 | 3.30.17, 3.40.1 |
| tp-link omada_sg3452x_firmware | 1.20.0 ≤ v < 1.20.18, 1.30.0 ≤ v < 1.30.1 | 1.20.18, 1.30.1 |
| tp-link omada_sg3452xmpp_firmware | 1.0.0 ≤ v < 1.0.15 | 1.0.15 |
| tp-link omada_sg3452xp_firmware | 2.20.0 ≤ v < 2.20.20, 2.30.0 ≤ v < 2.30.1 | 2.20.20, 2.30.1 |
| tp-link omada_sl2428p_firmware | 6.20.0 ≤ v < 6.20.18 | 6.20.18 |
| tp-link omada_sx3008f_firmware | 1.20.0 ≤ v < 1.20.12 | 1.20.12 |
| tp-link omada_sx3016f_firmware | 1.20.0 ≤ v < 1.20.16, 1.30.0 ≤ v < 1.30.1 | 1.20.16, 1.30.1 |
| tp-link omada_sx3032f_firmware | 1.0.0 ≤ v < 1.0.15 | 1.0.15 |
| tp-link omada_sx3206hpp_firmware | 1.20.0 ≤ v < 1.20.12 | 1.20.12 |
| tp-link omada_sx3832_firmware | 1.0.0 ≤ v < 1.0.12 | 1.0.12 |
| tp-link omada_sx3832mpp_firmware | 1.0.0 ≤ v < 1.0.11 | 1.0.11 |
| tp-link omada_tl-sg2428p_firmware | 4.0.0 ≤ v < 4.0.26 | 4.0.26 |
| tp-link omada_tl-sg3428mp_firmware | 5.0.0 ≤ v < 5.0.25 | 5.0.25 |
| tp-link omada_tl-sg3452p_firmware | 3.0.0 ≤ v < 3.0.22 | 3.0.22 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.