CVE-2025-15544: TP-Link Omada

Medium severity, CVSS 5.9. EPSS: 0.3% chance of exploitation in the next 30 days.

A cryptographic weakness exists in the Omada device adoption process.  During adoption, authentication credentials associated with site management are transmitted using a weak hashing algorithm that does not provide sufficient protection. An attacker who successfully intercepts adoption-related authentication traffic may be able to recover valid credentials and gain unauthorized access to managed devices or controller-managed environments.

Affected products

  • TP-Link Omada: affected versions not specified
  • TP-Link Omada DS1008X Firmware: affected versions not specified
  • TP-Link Omada DS1016G Firmware: affected versions not specified
  • TP-Link Omada DS1016GE Firmware: affected versions not specified
  • TP-Link Omada DS1018GMP Firmware: affected versions not specified
  • TP-Link Omada DS1024G Firmware: affected versions not specified
  • TP-Link Omada DS105G-m2 Firmware: affected versions not specified
  • TP-Link Omada DS105G Firmware: affected versions not specified
  • TP-Link Omada DS105GE Firmware: affected versions not specified
  • TP-Link Omada DS105GP Firmware: affected versions not specified
  • TP-Link Omada DS105X Firmware: affected versions not specified
  • TP-Link Omada DS106GPP Firmware: affected versions not specified
  • TP-Link Omada DS106P Firmware: affected versions not specified
  • TP-Link Omada DS108G-m2 Firmware: affected versions not specified
  • TP-Link Omada DS108G Firmware: affected versions not specified
  • TP-Link Omada DS108GE Firmware: affected versions not specified
  • TP-Link Omada DS108GP Firmware: affected versions not specified
  • TP-Link Omada DS110GMP Firmware: affected versions not specified
  • TP-Link Omada DS111P Firmware: affected versions not specified
  • TP-Link Omada EAP610-Outdoor Firmware: affected versions not specified
  • TP-Link Omada EAP610 Firmware: affected versions not specified
  • TP-Link Omada EAP615-Wall Firmware: affected versions not specified
  • TP-Link Omada EAP620HD Firmware: affected versions not specified
  • TP-Link Omada EAP660HD Firmware: affected versions not specified
  • TP-Link Omada ER605 Firmware: affected versions not specified
  • and 88 more

Published 2026-08-03. Last modified 2026-09-29.