CVE-2025-15628

Affected Omada devices rely on embedded certificates that are shared across deployments to establish trust between controllers and managed devices. An attacker who obtains the embedded certificates may be able to impersonate trusted controllers or devices and intercept affected communications.

Score
CVSS 4.0 8.2 High
Status
Analyzed - f23511db-6c3e-4e32-a477-6aa17d310630
Published
2026-08-03
Last modified
2026-08-03
Weaknesses
CWE-798

Affected products

References