Er7206 Firmware (Tp-link) - vulnerabilities (CVEs)

17 CVEs, 0 in the last 30 days, 7 known versions, newest CVE from 2026-08-20. Vendor: Tp-link.

CVEs of Er7206 Firmware

• CVE-2026-19683 - CVSS 7.4 (high), 2026-08-20: A vulnerability exists in the Dynamic DNS (DDNS) functionality of TP-Link Omada Gateways. During communication with a third-party DDNS service, authentication…
• CVE-2026-19586 - CVSS 9.8 (critical), 2026-08-20: A pre-authentication OS command injection vulnerability has been identified in Omada gateways configured to operate as an OpenVPN Server due to insufficient…
• CVE-2026-9033 - CVSS 6 (medium), 2026-08-20: An unauthenticated attacker with network access to the captive portal service of an affected device can terminate active captive portal sessions, including…
• CVE-2025-9290 - CVSS 6 (medium), 2026-01-23: An authentication weakness was identified in Omada Controllers, Gateways and Access Points, controller-device adoption due to improper handling of random…
• CVE-2025-7851 - CVSS 9.8 (critical), 2025-10-21: An attacker may obtain the root shell on the underlying OS system with the restricted conditions on Omada gateways.
• CVE-2025-7850 - CVSS 9.3 (critical), 2025-10-21: A command injection vulnerability may be exploited after the admin's authentication on the web portal on Omada gateways.
• CVE-2025-6542 - CVSS 9.8 (critical), 2025-10-21: An arbitrary OS command may be executed on the product by a remote unauthenticated attacker.
• CVE-2025-6541 - CVSS 8.8 (high), 2025-10-21: An arbitrary OS command may be executed on the product by the user who can log in to the web management interface.
• CVE-2024-21827 - CVSS 7.2 (high), 2024-06-25: A leftover debug code vulnerability exists in the cli_server debug functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.4.1 Build 20240117 Rel.57421. A…
• CVE-2023-47618 - CVSS 7.2 (high), 2024-02-06: A post authentication command execution vulnerability exists in the web filtering functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build…
• CVE-2023-47209 - CVSS 7.2 (high), 2024-02-06: A post authentication command injection vulnerability exists in the ipsec policy functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322…
• CVE-2023-47167 - CVSS 7.2 (high), 2024-02-06: A post authentication command injection vulnerability exists in the GRE policy functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322…
• CVE-2023-46683 - CVSS 7.2 (high), 2024-02-06: A post authentication command injection vulnerability exists when configuring the wireguard VPN functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0…
• CVE-2023-47617 - CVSS 7.2 (high), 2024-02-06: A post authentication command injection vulnerability exists when configuring the web group member of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build…
• CVE-2023-43482 - CVSS 7.2 (high), 2024-02-06: A command execution vulnerability exists in the guest resource functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A…
• CVE-2023-42664 - CVSS 7.2 (high), 2024-02-06: A post authentication command injection vulnerability exists when setting up the PPTP global configuration of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0…
• CVE-2023-36498 - CVSS 7.2 (high), 2024-02-06: A post-authentication command injection vulnerability exists in the PPTP client functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322…