Lucene search
K

28 matches found

CNNVD
CNNVD
added 2026/01/23 12:0 a.m.1 views

TP-Link's various products have security vulnerabilities

TP-Link Omada Controllers are products of the Chinese company TP-Link. TP-Link Omada Controllers are a series of centralized management platforms. TP-Link Omada Gateways are a series of gateway devices. TP-Link Omada Access Points are a series of access point devices. Several TP-Link products hav...

6CVSS5.8AI score0.00035EPSS
Exploits0References4
NVD
NVD
added 2026/01/22 10:16 p.m.3 views

CVE-2025-9289

A Cross-Site Scripting XSS vulnerability was identified in a parameter in Omada Controllers due to improper input sanitization. Exploitation requires advanced conditions, such as network positioning or emulating a trusted entity, and user interaction by an authenticated administrator. If...

5.7CVSS0.00015EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/01/22 9:48 p.m.14 views

CVE-2025-9289 Cross-Site Scripting (XSS) on Omada Controllers

A Cross-Site Scripting XSS vulnerability was identified in a parameter in Omada Controllers due to improper input sanitization. Exploitation requires advanced conditions, such as network positioning or emulating a trusted entity, and user interaction by an authenticated administrator. If...

5.7CVSS0.00015EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/01/22 9:48 p.m.4 views

CVE-2025-9289 Cross-Site Scripting (XSS) on Omada Controllers

A Cross-Site Scripting XSS vulnerability was identified in a parameter in Omada Controllers due to improper input sanitization. Exploitation requires advanced conditions, such as network positioning or emulating a trusted entity, and user interaction by an authenticated administrator. If...

5.7CVSS5.8AI score0.00015EPSS
Exploits0References2
CVE
CVE
added 2026/01/22 9:48 p.m.7 views

CVE-2025-9289

CVE-2025-9289 is a Cross-Site Scripting (XSS) vulnerability in Omada Controllers caused by improper input sanitization in a parameter. Exploitation requires specific conditions (network positioning or impersonating a trusted entity) and interaction from an authenticated administrator, potentially...

5.7CVSS5.8AI score0.00015EPSS
Exploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/22 9:48 p.m.3 views

CVE-2025-9289

A Cross-Site Scripting XSS vulnerability was identified in a parameter in Omada Controllers due to improper input sanitization. Exploitation requires advanced conditions, such as network positioning or emulating a trusted entity, and user interaction by an authenticated administrator. If...

5.7CVSS5.7AI score0.00015EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/01/22 12:0 a.m.3 views

PT-2026-4304

Name of the Vulnerable Software and Affected Versions Omada Controllers, Gateways and Access Points affected versions not specified Description An authentication weakness exists in Omada Controllers, Gateways, and Access Points related to controller-device adoption. This is due to improper handli...

6CVSS5.8AI score0.00035EPSS
Exploits0References9
CNNVD
CNNVD
added 2026/01/22 12:0 a.m.2 views

TP-Link Omada controllers have security vulnerabilities

TP-Link Omada Controllers are a series of centralized management platforms developed by TP-Link Corporation. The TP-Link Omada Controllers have security vulnerabilities, which stem from improper parameter input handling. These vulnerabilities may lead to cross-site scripting attacks...

5.7CVSS5.6AI score0.00015EPSS
Exploits0References3
Rows per page
Query Builder