Threat Investigation
Request a demo

CVE-2026-19586

Critical

Description

A pre-authentication OS command injection vulnerability has been identified in Omada gateways configured to operate as an OpenVPN Server due to insufficient validation of client-supplied data during OpenVPN connection establishment. An unauthenticated remote attacker may provide specially crafted input influencing backend command execution logic before authentication completes. Exploitation requires the OpenVPN Server feature to be enabled, VPN service reachable by the attacker and attacker to be able to initiate an OpenVPN connection attempt.  Successful exploitation may allow arbitrary command execution, potentially leading to full compromise of the affected device.

SeverityCritical
CVSS9.8
Exploit probability—
ProductTp-link Er7212pc Firmware
PublishedAug 20, 2026
First seenAug 20, 2026
Weakness typeCWE-78OS command injection

How to fix

Update
  • tp-link er7212pc_firmware2.4.3 or later
  • tp-link er605_firmware2.4.4 or later
  • tp-link er605w_firmware2.0.4 or later
  • tp-link er7206_firmware2.3.5 or later
  • tp-link er7406_firmware1.3.4 or later
  • tp-link er707-m2_firmware1.4.4 or later
  • tp-link er7412-m2_firmware1.2.0 or later
  • tp-link er8411_firmware1.4.1 or later
  • tp-link er706w_firmware1.2.11 or later
  • tp-link er706w-4g_firmware1.2.6, 2.1.11 or later
  • tp-link er706wp-4g_firmware1.1.11 or later
  • tp-link er703wp-4g-outdoor_firmware1.1.7 or later
Patches
Vendor advisories

Affected products

ProductAffected versionsFixed in
tp-link er7212pc_firmwarev < 2.4.32.4.3
tp-link er605_firmwarev < 2.4.42.4.4
tp-link er605w_firmwarev < 2.0.42.0.4
tp-link er7206_firmwarev < 2.3.52.3.5
tp-link er7406_firmwarev < 1.3.41.3.4
tp-link er707-m2_firmwarev < 1.4.41.4.4
tp-link er7412-m2_firmwarev < 1.2.01.2.0
tp-link er8411_firmwarev < 1.4.11.4.1
tp-link er706w_firmwarev < 1.2.111.2.11
tp-link er706w-4g_firmwarev < 1.2.6, v < 2.1.111.2.6, 2.1.11
tp-link er706wp-4g_firmwarev < 1.1.111.1.11
tp-link er703wp-4g-outdoor_firmwarev < 1.1.71.1.7
tp-link er603wp-4g-outdoor_firmwarev < 1.0.21.0.2
tp-link er701-5g-outdoor_firmwarev < 1.0.31.0.3
tp-link dr3220v-4g_firmwarev < 1.2.01.2.0
tp-link dr3650v_firmwarev < 1.2.01.2.0
tp-link dr3650v-4g_firmwarev < 1.2.01.2.0
tp-link dr3150_firmwarev < 1.0.11.0.1

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.