Record status Published
Identifier year (not publication year) 2026
Source publication Sep 8, 2026
Source updated Sep 21, 2026
Imported by cveboard Oct 24, 2026
CNA source text (English) Unauthenticated Account Information Disclosure in Multiple Omada Controllers
An information
disclosure vulnerability has been identified in Omada Controller. An API endpoint intended for Controller initialization
remains accessible after completion and may disclose account-related
information to unauthenticated remote users.
Successful
exploitation may allow an attacker to remote query the affected endpoint that
may facilitate user enumeration and subsequent attacks targeting administrative
accounts.
Scoped product and version facts Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Omada Software Controller
Vendor TP-Link System Inc.
Product Omada Software Controller
Default status unaffected
Omada Software Controller · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0 affectedcustom 6.3.0.45 Unavailable None listed
OC200 V1
Vendor TP-Link Systems Inc.
Product OC200 V1
Platforms Unknown
Default status unaffected
OC200 V1 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0 affectedcustom (UN)_V1_1.42.10 Build 20260825 Unavailable None listed
OC200 v2
Vendor TP Link Systems Inc.
Product OC200 v2
Platforms Unknown
Default status unaffected
OC200 v2 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0 affectedcustom (UN)_V2_2.27.10 Build 20260825 Unavailable None listed
OC200 v3
Vendor TP-Link Systems Inc
Product OC200 v3
Platforms Unknown
Default status unaffected
OC200 v3 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0 affectedcustom (UN)_V3_3.4.10 Build 20260825 Unavailable None listed
OC220 v1
Vendor TP-Link Systems Inc.
Product OC220 v1
Platforms Unknown
Default status unaffected
OC220 v1 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0 affectedcustom (UN)_V1_1.7.10 Build 20260825 Unavailable None listed
OC220 v2
Vendor TP-Link Systems Inc
Product OC220 v2
Platforms Unknown
Default status unaffected
OC220 v2 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0 affectedcustom (UN)_V2_2.6.10 Build 20260825 Unavailable None listed
OC300 v1
Vendor TP-Link Systems Inc.
Product OC300 v1
Platforms Unknown
Default status unaffected
OC300 v1 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0 affectedcustom (UN)_V1_1.36.10 Build 20260825 Unavailable None listed
OC400 v1
Vendor TP-Link Systems Inc.
Product OC400 v1
Platforms Unknown
Default status unaffected
OC400 v1 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0 affectedcustom (UN)_V1_1.14.10 Build 20260825 Unavailable None listed