CVE-2025-15627: TP-Link Omada DS1008X Firmware

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

A cryptographic weakness exists in the Omada adoption protocol.  The protocol relies on hard-coded cryptographic keys to establish trust and protect authentication exchanges between controllers and managed devices during device adoption. An attacker may be able to impersonate trusted controllers or managed devices and gain access to sensitive adoption-related communications.

Affected products

  • TP-Link Omada DS1008X Firmware: affected versions not specified
  • TP-Link Omada DS1016G Firmware: affected versions not specified
  • TP-Link Omada DS1016GE Firmware: affected versions not specified
  • TP-Link Omada DS1018GMP Firmware: affected versions not specified
  • TP-Link Omada DS1024G Firmware: affected versions not specified
  • TP-Link Omada DS105G-m2 Firmware: affected versions not specified
  • TP-Link Omada DS105G Firmware: affected versions not specified
  • TP-Link Omada DS105GE Firmware: affected versions not specified
  • TP-Link Omada DS105GP Firmware: affected versions not specified
  • TP-Link Omada DS105X Firmware: affected versions not specified
  • TP-Link Omada DS106GPP Firmware: affected versions not specified
  • TP-Link Omada DS106P Firmware: affected versions not specified
  • TP-Link Omada DS108G-m2 Firmware: affected versions not specified
  • TP-Link Omada DS108G Firmware: affected versions not specified
  • TP-Link Omada DS108GE Firmware: affected versions not specified
  • TP-Link Omada DS108GP Firmware: affected versions not specified
  • TP-Link Omada DS110GMP Firmware: affected versions not specified
  • TP-Link Omada DS111P Firmware: affected versions not specified
  • TP-Link Omada EAP610-Outdoor Firmware: affected versions not specified
  • TP-Link Omada EAP610 Firmware: affected versions not specified
  • TP-Link Omada EAP615-Wall Firmware: affected versions not specified
  • TP-Link Omada EAP620HD Firmware: affected versions not specified
  • TP-Link Omada EAP660HD Firmware: affected versions not specified
  • TP-Link Omada ER605 Firmware: affected versions not specified
  • TP-Link Omada ER703WP-4g-Outdoor Firmware: affected versions not specified
  • and 87 more

Published 2026-08-03. Last modified 2026-09-29.