CVE-2026-1668: TP-Link Omada SG2005P-Pd Firmware

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

The web interface on multiple Omada switches does not adequately validate certain external inputs, which may lead to out-of-bound memory access when processing crafted requests. Under specific conditions, this flaw may result in unintended command execution.<br>An unauthenticated attacker with network access to the affected interface may cause memory corruption, service instability, or information disclosure. Successful exploitation may allow remote code execution or denial-of-service.

Affected products

  • TP-Link Omada SG2005P-Pd Firmware: from 1.0.0, before 1.0.19 (fixed in 1.0.19)
  • TP-Link Omada SG2008 Firmware: from 4.20.0, before 4.20.17 (fixed in 4.20.17); from 4.30.0, before 4.30.1 (fixed in 4.30.1)
  • TP-Link Omada SG2008P Firmware: from 3.20.0, before 3.20.17 (fixed in 3.20.17); from 3.30.0, before 3.30.1 (fixed in 3.30.1)
  • TP-Link Omada SG2016P Firmware: from 1.20.0, before 1.20.17 (fixed in 1.20.17); from 1.30.0, before 1.30.1 (fixed in 1.30.1)
  • TP-Link Omada SG2210MP Firmware: from 4.20.0, before 4.20.18 (fixed in 4.20.18); from 5.0.0, before 5.0.15 (fixed in 5.0.15); from 5.20.0, before 5.20.1 (fixed in 5.20.1)
  • TP-Link Omada SG2210P Firmware: from 5.20.0, before 5.20.18 (fixed in 5.20.18); from 5.30.0, before 5.30.1 (fixed in 5.30.1)
  • TP-Link Omada SG2210XMP-m2 Firmware: from 1.0.0, before 1.0.19 (fixed in 1.0.19)
  • TP-Link Omada SG2218 Firmware: from 1.20.0, before 1.20.17 (fixed in 1.20.17); from 1.30.0, before 1.30.1 (fixed in 1.30.1)
  • TP-Link Omada SG2218P Firmware: from 1.20.0, before 1.20.17 (fixed in 1.20.17); from 2.0.0, before 2.0.14 (fixed in 2.0.14); from 2.20.0, before 2.20.2 (fixed in 2.20.2)
  • TP-Link Omada SG2428LP Firmware: from 1.0.0, before 1.0.13 (fixed in 1.0.13)
  • TP-Link Omada SG2428P Firmware: from 5.20.0, before 5.20.20 (fixed in 5.20.20); from 5.30.0, before 5.30.16 (fixed in 5.30.16)
  • TP-Link Omada SG2452LP Firmware: from 1.0.0, before 1.0.13 (fixed in 1.0.13)
  • TP-Link Omada SG3210 Firmware: from 3.20.0, before 3.20.17 (fixed in 3.20.17); from 3.30.0, before 3.30.1 (fixed in 3.30.1)
  • TP-Link Omada SG3210X-m2 Firmware: from 1.20.0, before 1.20.1 (fixed in 1.20.1)
  • TP-Link Omada SG3210XHP-m2 Firmware: from 3.0.0, before 3.0.21 (fixed in 3.0.21)
  • TP-Link Omada SG3218XP-m2 Firmware: from 1.0.0, before 1.0.19 (fixed in 1.0.19)
  • TP-Link Omada SG3428 Firmware: from 2.30.0, before 2.30.16 (fixed in 2.30.16); from 2.40.0, before 2.40.1 (fixed in 2.40.1)
  • TP-Link Omada SG3428MP Firmware: from 6.20.0, before 6.20.20 (fixed in 6.20.20); from 6.30.0, before 6.30.1 (fixed in 6.30.1)
  • TP-Link Omada SG3428X-m2 Firmware: from 1.20.0, before 1.20.18 (fixed in 1.20.18)
  • TP-Link Omada SG3428X Firmware: from 1.30.0, before 1.30.17 (fixed in 1.30.17); from 1.40.0, before 1.40.1 (fixed in 1.40.1)
  • TP-Link Omada SG3428XF Firmware: from 1.20.0, before 1.20.16 (fixed in 1.20.16); from 1.30.0, before 1.30.1 (fixed in 1.30.1)
  • TP-Link Omada SG3428XMP Firmware: from 3.20.0, before 3.20.21 (fixed in 3.20.21); from 3.30.0, before 3.30.1 (fixed in 3.30.1)
  • TP-Link Omada SG3428XMPP Firmware: from 1.0.0, before 1.0.16 (fixed in 1.0.16); from 1.20.0, before 1.20.1 (fixed in 1.20.1)
  • TP-Link Omada SG3428XPP-m2 Firmware: from 1.20.0, before 1.20.19 (fixed in 1.20.19)
  • TP-Link Omada SG3452 Firmware: from 1.20.0, before 1.20.17 (fixed in 1.20.17); from 1.30.0, before 1.30.1 (fixed in 1.30.1)
  • and 14 more

Published 2026-03-13. Last modified 2026-06-17.