CVE-2025-15629: TP-Link Omada DS1008X Firmware

High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days.

A cryptographic weakness exists in the Omada adoption protocol where session encryption keys used to protect communications between controllers and managed devices may be predictable due to insufficient entropy in session key generation. An attacker who successfully intercepts adoption-related communications may be able to recover session encryption keys and decrypt affected communications.

Affected products

  • TP-Link Omada DS1008X Firmware: affected versions not specified
  • TP-Link Omada DS1016G Firmware: affected versions not specified
  • TP-Link Omada DS1016GE Firmware: affected versions not specified
  • TP-Link Omada DS1018GMP Firmware: affected versions not specified
  • TP-Link Omada DS1024G Firmware: affected versions not specified
  • TP-Link Omada DS105G-m2 Firmware: affected versions not specified
  • TP-Link Omada DS105G Firmware: affected versions not specified
  • TP-Link Omada DS105GE Firmware: affected versions not specified
  • TP-Link Omada DS105GP Firmware: affected versions not specified
  • TP-Link Omada DS105X Firmware: affected versions not specified
  • TP-Link Omada DS106GPP Firmware: affected versions not specified
  • TP-Link Omada DS106P Firmware: affected versions not specified
  • TP-Link Omada DS108G-m2 Firmware: affected versions not specified
  • TP-Link Omada DS108G Firmware: affected versions not specified
  • TP-Link Omada DS108GE Firmware: affected versions not specified
  • TP-Link Omada DS108GP Firmware: affected versions not specified
  • TP-Link Omada DS110GMP Firmware: affected versions not specified
  • TP-Link Omada DS111P Firmware: affected versions not specified
  • TP-Link Omada EAP610-Outdoor Firmware: affected versions not specified
  • TP-Link Omada EAP610 Firmware: affected versions not specified
  • TP-Link Omada EAP615-Wall Firmware: affected versions not specified
  • TP-Link Omada EAP620HD Firmware: affected versions not specified
  • TP-Link Omada EAP660HD Firmware: affected versions not specified
  • TP-Link Omada ER605 Firmware: affected versions not specified
  • TP-Link Omada ER703WP-4g-Outdoor Firmware: affected versions not specified
  • and 87 more

Published 2026-08-03. Last modified 2026-09-29.