Omada Sg2008 Firmware (Tp-link) - vulnerabilities (CVEs)
8 CVEs, 0 in the last 30 days, 6 known versions, newest CVE from 2026-08-03. Vendor: Tp-link.
CVEs of Omada Sg2008 Firmware
- CVE-2025-15631 - CVSS 5.9 (medium), 2026-08-03: A cryptographic weakness exists in affected Omada devices where site credentials are protected using a legacy hashing algorithm that does not provide…
- CVE-2025-15630 - CVSS 5.9 (medium), 2026-08-03: A race condition exists in the cloud-based Omada device adoption process when an attacker may be able to interact with the adoption workflow before a…
- CVE-2025-15629 - CVSS 7.5 (high), 2026-08-03: A cryptographic weakness exists in the Omada adoption protocol where session encryption keys used to protect communications between controllers and managed…
- CVE-2025-15628 - CVSS 8.2 (high), 2026-08-03: Affected Omada devices rely on embedded certificates that are shared across deployments to establish trust between controllers and managed devices. An…
- CVE-2025-15627 - CVSS 7.5 (high), 2026-08-03: A cryptographic weakness exists in the Omada adoption protocol. The protocol relies on hard-coded cryptographic keys to establish trust and protect…
- CVE-2025-15544 - CVSS 6.9 (medium), 2026-08-03: A cryptographic weakness exists in the Omada device adoption process. During adoption, authentication credentials associated with site management are…
- CVE-2025-9291 - CVSS 7.7 (high), 2026-08-03: A certification validation weakness exists in communication between affected Omada devices and cloud controllers. Certificate identity verification does not…
- CVE-2026-1668 - CVSS 9.8 (critical), 2026-03-13: The web interface on multiple Omada switches does not adequately validate certain external inputs, which may lead to out-of-bound memory access when…
