Vulnerability in TP-Link Omada

CVE-2025-15544

A cryptographic weakness exists in the Omada device adoption process.  During adoption, authentication credentials associated with site management are transmitted using a weak hashing algorithm that does not provide sufficient protection. An attacker who successfully intercepts adoption-related authentication traffic may be able to recover valid credentials and gain unauthorized access to managed devices or controller-managed environments.

EPSS: 0.002 (10.2th percentile) — read the EPSS interpretation.