CVE-2025-9290
Published Jan 23, 2026An authentication weakness was identified in Omada Controllers, Gateways and Access Points, controller-device adoption due to improper handling of random values. Exploitation requ…
Vendor/product archive
tp-link / er7206_firmware CVEs
Beta · best-effort14 CVEs tagged to tp-link / er7206_firmware — 2 Critical, 11 High, 1 Medium, 0 Low, 0 Unrated.
CVE-2025-7851
Published Oct 21, 2025An attacker may obtain the root shell on the underlying OS system with the restricted conditions on Omada gateways.
- evidence mentions
- 2
- Buzz score
- 17.5
CVE-2025-7850
Published Oct 21, 2025A command injection vulnerability may be exploited after the admin's authentication on the web portal on Omada gateways.
- evidence mentions
- 2
- Buzz score
- 17.5
CVE-2025-6542
Published Oct 21, 2025An arbitrary OS command may be executed on the product by a remote unauthenticated attacker.
- evidence mentions
- 2
- Buzz score
- 17.5
CVE-2025-6541
Published Oct 21, 2025An arbitrary OS command may be executed on the product by the user who can log in to the web management interface.
- evidence mentions
- 2
- Buzz score
- 17.5
CVE-2024-21827
Published Jun 25, 2024A leftover debug code vulnerability exists in the cli_server debug functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.4.1 Build 20240117 Rel.57421. A specially crafted ser…
CVE-2023-47618
Published Feb 6, 2024A post authentication command execution vulnerability exists in the web filtering functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specia…
CVE-2023-47617
Published Feb 6, 2024A post authentication command injection vulnerability exists when configuring the web group member of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A spe…
CVE-2023-47209
Published Feb 6, 2024A post authentication command injection vulnerability exists in the ipsec policy functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A special…
CVE-2023-47167
Published Feb 6, 2024A post authentication command injection vulnerability exists in the GRE policy functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially…
CVE-2023-46683
Published Feb 6, 2024A post authentication command injection vulnerability exists when configuring the wireguard VPN functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.…
CVE-2023-43482
Published Feb 6, 2024A command execution vulnerability exists in the guest resource functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP re…
CVE-2023-42664
Published Feb 6, 2024A post authentication command injection vulnerability exists when setting up the PPTP global configuration of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.7059…
CVE-2023-36498
Published Feb 6, 2024A post-authentication command injection vulnerability exists in the PPTP client functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A speciall…
Showing 1-14 of 14 CVEsPage 1 of 1