CVE-2025-7850

🗓️ 21 Oct 2025 01:15:37Reported by [email protected]Type

Command injection vulnerability exploitable after admin authentication on the Omada gateway web portal.

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2025-7850	21 Oct 202501:33	–	circl
CNNVD	TP-Link Omada gateway security vulnerabilities	21 Oct 202500:00	–	cnnvd
CVE	CVE-2025-7850	21 Oct 202500:28	–	cve
Cvelist	CVE-2025-7850 Authenticated OS command execution	21 Oct 202500:28	–	cvelist
EUVD	EUVD-2025-35116	21 Oct 202500:28	–	euvd
osv_cve	CVE-2025-7850	21 Oct 202501:15	–	osv_cve
Positive Technologies	PT-2025-42824	21 Oct 202500:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2025-7850: Improper Neutralization of Special Elements used in an OS Command	21 Oct 202500:00	–	rapid7
RedhatCVE	CVE-2025-7850	22 Oct 202501:12	–	redhatcve
The Hacker News	TP-Link Patches Four Omada Gateway Flaws, Two Allow Remote Code Execution	22 Oct 202504:38	–	thn

NVD

Node

AND

tp-link er8411_firmwareRange<1.3.3

tp-link er8411_firmwareMatch1.3.3-

tp-link er8411Match-

Node

AND

tp-link er7412-m2_firmwareRange<1.1.0

tp-link er7412-m2_firmwareMatch1.1.0-

tp-link er7412-m2Match-

Node

AND

tp-link er707-m2_firmwareRange<1.3.1

tp-link er707-m2_firmwareMatch1.3.1-

tp-link er707-m2Match-

Node

AND

tp-link er7206_firmwareRange<2.2.2

tp-link er7206_firmwareMatch2.2.2-

tp-link er7206Match-

Node

AND

tp-link er605_firmwareRange<2.3.1

tp-link er605_firmwareMatch2.3.1-

tp-link er605Match-

Node

AND

tp-link er706w_firmwareRange<1.2.1

tp-link er706w_firmwareMatch1.2.1-

tp-link er706wMatch-

Node

AND

tp-link er706w-4g_firmwareRange<1.2.1

tp-link er706w-4g_firmwareMatch1.2.1-

tp-link er706w-4gMatch-

Node

AND

tp-link er7212pc_firmwareRange<2.1.3

tp-link er7212pc_firmwareMatch2.1.3-

tp-link er7212pcMatch-

Node

AND

tp-link g36_firmwareRange<1.1.4

tp-link g36_firmwareMatch1.1.4-

tp-link g36Match-

Node

AND

tp-link g611_firmwareRange<1.2.2

tp-link g611_firmwareMatch1.2.2-

tp-link g611Match-

Node

AND

tp-link fr365_firmwareRange<1.1.10

tp-link fr365_firmwareMatch1.1.10-

tp-link fr365Match-

Node

AND

tp-link fr205_firmwareRange<1.0.3

tp-link fr205_firmwareMatch1.0.3-

tp-link fr205Match-

Node

AND

tp-link fr307-m2_firmwareRange<1.2.5

tp-link fr307-m2_firmwareMatch1.2.5-

tp-link fr307-m2Match-

Source	Link
omadanetworks	www.omadanetworks.com/us/business-networking/omada-pro-router-wired-router/
forescout	www.forescout.com/blog/new-tp-link-router-vulnerabilities-a-primer-on-rooting-routers/
tp-link	www.tp-link.com/us/business-networking/soho-festa-gateway/
omadanetworks	www.omadanetworks.com/us/business-networking/all-omada-router/
support	www.support.omadanetworks.com/en/document/108456/

18 Oct 2026 21:10Current

CVSS 3.17.2

CVSS 49.3

EPSS0.03308

SSVC

CWE-78