CVE-2025-7850

CVSS: 9.3 Critical
Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:H
Risk score: 74.4
Published: 2025-10-21
Status: Published

A command injection vulnerability may be exploited after the admin's authentication on the web portal on Omada gateways.

Weaknesses

CWE-78

Coverage 2

threat-intel

ThreatsDay: Odysseus RCE, Samsung One-Click Takeover, iCloud Backdoor Fight + 27 More Stories

This week's 'ThreatsDay' bulletin highlights a diverse range of security threats, including a China-linked telecom risk, a multi-stage phishing attack leveraging ClickOnce files, a supply chain attack involving 846 softw…

The Hacker News · Aug 6, 2026 High

CVE-2025-21079 CVE-2025-58486 CVE-2026-25177 CH US supply-chain malware phishing

vulnerability

TP-Link Omada ZTP Vulnerabilities Chain Into Full Network Takeover

Researchers at Forescout discovered 15 vulnerabilities in TP-Link’s Omada networking ecosystem’s zero-touch provisioning (ZTP) system, allowing attackers to potentially take over entire networks by chaining together thes…

SecurityWeek · Aug 4, 2026 High

CVE-2025-7850 CVE-2025-7851 ztp network vulnerability

All articles mentioning it

news.mlab.sh

CVE-2025-7850

Weaknesses

Coverage 2

ThreatsDay: Odysseus RCE, Samsung One-Click Takeover, iCloud Backdoor Fight + 27 More Stories

TP-Link Omada ZTP Vulnerabilities Chain Into Full Network Takeover

Advisories and references