TP-Link Systems Inc OC220 v1 vulnerabilities

2 CVEs affecting TP-Link Systems Inc OC220 v1, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-84941, published 2026-09-11.

More from TP-Link Systems Inc.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-81531, published 2026-09-08. Medium severity, CVSS 6.9. EPSS: 0.7% chance of exploitation in the next 30 days. An information disclosure vulnerability has been identified in Omada Controller.  An API endpoint intended for Controller initialization remains accessible after completion and may disclose…
• CVE-2026-84941, published 2026-09-11. Medium severity, CVSS 6.9. EPSS: 0.5% chance of exploitation in the next 30 days. An information disclosure vulnerability in the SAML Single Sign-On (SSO) functionality of Omada Controller allows an authenticated user with SAML configuration privileges to access sensitive…