Er605w Firmware (Tp-link) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2026-08-20. Vendor: Tp-link.

CVEs of Er605w Firmware

• CVE-2026-19683 - CVSS 7.4 (high), 2026-08-20: A vulnerability exists in the Dynamic DNS (DDNS) functionality of TP-Link Omada Gateways. During communication with a third-party DDNS service, authentication…
• CVE-2026-19586 - CVSS 9.8 (critical), 2026-08-20: A pre-authentication OS command injection vulnerability has been identified in Omada gateways configured to operate as an OpenVPN Server due to insufficient…
• CVE-2026-9033 - CVSS 6 (medium), 2026-08-20: An unauthenticated attacker with network access to the captive portal service of an affected device can terminate active captive portal sessions, including…
• CVE-2025-9290 - CVSS 6 (medium), 2026-01-23: An authentication weakness was identified in Omada Controllers, Gateways and Access Points, controller-device adoption due to improper handling of random…