CVE-2025-15630: TP-Link Omada DS1008X Firmware

Medium severity, CVSS 5.9. EPSS: 0.3% chance of exploitation in the next 30 days.

A race condition exists in the cloud-based Omada device adoption process when an attacker may be able to interact with the adoption workflow before a legitimate device completes registration, resulting in provisioning information being delivered to an attacker. Successful exploitation may allow disclosure of provisioning information intended for a legitimate device.

Affected products

  • TP-Link Omada DS1008X Firmware: affected versions not specified
  • TP-Link Omada DS1016G Firmware: affected versions not specified
  • TP-Link Omada DS1016GE Firmware: affected versions not specified
  • TP-Link Omada DS1018GMP Firmware: affected versions not specified
  • TP-Link Omada DS1024G Firmware: affected versions not specified
  • TP-Link Omada DS105G-m2 Firmware: affected versions not specified
  • TP-Link Omada DS105G Firmware: affected versions not specified
  • TP-Link Omada DS105GE Firmware: affected versions not specified
  • TP-Link Omada DS105GP Firmware: affected versions not specified
  • TP-Link Omada DS105X Firmware: affected versions not specified
  • TP-Link Omada DS106GPP Firmware: affected versions not specified
  • TP-Link Omada DS106P Firmware: affected versions not specified
  • TP-Link Omada DS108G-m2 Firmware: affected versions not specified
  • TP-Link Omada DS108G Firmware: affected versions not specified
  • TP-Link Omada DS108GE Firmware: affected versions not specified
  • TP-Link Omada DS108GP Firmware: affected versions not specified
  • TP-Link Omada DS110GMP Firmware: affected versions not specified
  • TP-Link Omada DS111P Firmware: affected versions not specified
  • TP-Link Omada EAP610-Outdoor Firmware: affected versions not specified
  • TP-Link Omada EAP610 Firmware: affected versions not specified
  • TP-Link Omada EAP615-Wall Firmware: affected versions not specified
  • TP-Link Omada EAP620HD Firmware: affected versions not specified
  • TP-Link Omada EAP660HD Firmware: affected versions not specified
  • TP-Link Omada ER605 Firmware: affected versions not specified
  • TP-Link Omada ER703WP-4g-Outdoor Firmware: affected versions not specified
  • and 87 more

Published 2026-08-03. Last modified 2026-09-29.