Buffer overflow in Tp-Link Omada Sg2005p-Pd

CVE-2026-1668

The web interface on multiple Omada switches does not adequately validate certain external inputs, which may lead to out-of-bound memory access when processing crafted requests. Under specific conditions, this flaw may result in unintended command execution.<br>An unauthenticated attacker with network access to the affected interface may cause memory corruption, service instability, or information disclosure. Successful exploitation may allow remote code execution or denial-of-service.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.010 (58.3th percentile) — read the EPSS interpretation.