Threat Investigation
Request a demo

CVE-2026-19683

High

Description

A vulnerability exists in the Dynamic DNS (DDNS) functionality of TP-Link Omada Gateways. During communication with a third-party DDNS service, authentication credentials are transmitted over an unencrypted channel. An attacker who can observe or manipulate traffic between an affected device and the DDNS service may obtain sensitive authentication information or interfere with DDNS update operations. Exploitation requires DDNS to be configured, communication with an external DDNS service, and attacker visibility or control of the relevant network path.  Successful exploitation may result in disclosure of DDNS account credentials, unauthorized access to DDNS management functionality, or modification of DNS records associated with the affected deployment.

SeverityHigh
CVSS7.4
Exploit probability—
ProductTp-link Er7212pc Firmware
PublishedAug 20, 2026
First seenAug 20, 2026
Weakness typeCWE-319CWE-319

How to fix

Update
  • tp-link er7212pc_firmware2.4.3 or later
  • tp-link er605_firmware2.4.4 or later
  • tp-link er7206_firmware2.3.5 or later
  • tp-link er7406_firmware1.3.4 or later
  • tp-link er707-m2_firmware1.4.4 or later
  • tp-link er7412-m2_firmware1.2.0 or later
  • tp-link er8411_firmware1.4.1 or later
  • tp-link er706w_firmware1.2.11 or later
  • tp-link er706w-4g_firmware1.2.6, 2.1.11 or later
  • tp-link er706wp-4g_firmware1.1.11 or later
  • tp-link er703wp-4g-outdoor_firmware1.1.7 or later
  • tp-link dr3220v-4g_firmware1.2.0 or later
Patches
Vendor advisories

Affected products

ProductAffected versionsFixed in
tp-link er7212pc_firmwarev < 2.4.32.4.3
tp-link er605_firmwarev < 2.4.42.4.4
tp-link er7206_firmwarev < 2.3.52.3.5
tp-link er7406_firmwarev < 1.3.41.3.4
tp-link er707-m2_firmwarev < 1.4.41.4.4
tp-link er7412-m2_firmwarev < 1.2.01.2.0
tp-link er8411_firmwarev < 1.4.11.4.1
tp-link er706w_firmwarev < 1.2.111.2.11
tp-link er706w-4g_firmwarev < 1.2.6, v < 2.1.111.2.6, 2.1.11
tp-link er706wp-4g_firmwarev < 1.1.111.1.11
tp-link er703wp-4g-outdoor_firmwarev < 1.1.71.1.7
tp-link dr3220v-4g_firmwarev < 1.2.01.2.0
tp-link dr3650v_firmwarev < 1.2.01.2.0
tp-link dr3650v-4g_firmwarev < 1.2.01.2.0
tp-link er603wp-4g-outdoor_firmwarev < 1.0.21.0.2
tp-link dr3150_firmwarev < 1.0.11.0.1
tp-link er701-5g-outdoor_firmwarev < 1.0.31.0.3
tp-link er605w_firmwarev < 2.0.42.0.4

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.