Vulnerabilities

CVSS

8.7 High

Vector

CVSS:4.0/AV:A/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:H

Risk score

69.6

Published

2025-10-21

Status

Published

An attacker may obtain the root shell on the underlying OS system with the restricted conditions on Omada gateways.

Weaknesses

CWE-269

Coverage 2

threat-intel

ThreatsDay: Odysseus RCE, Samsung One-Click Takeover, iCloud Backdoor Fight + 27 More Stories

This week's 'ThreatsDay' bulletin highlights a diverse range of security threats, including a China-linked telecom risk, a multi-stage phishing attack leveraging ClickOnce files, a supply chain attack involving 846 softw…

The Hacker News · Aug 6, 2026 High

CVE-2025-21079CVE-2025-58486CVE-2026-25177CHUSsupply-chainmalwarephishing

vulnerability

TP-Link Omada ZTP Vulnerabilities Chain Into Full Network Takeover

Researchers at Forescout discovered 15 vulnerabilities in TP-Link’s Omada networking ecosystem’s zero-touch provisioning (ZTP) system, allowing attackers to potentially take over entire networks by chaining together thes…

SecurityWeek · Aug 4, 2026 High

CVE-2025-7850CVE-2025-7851ztpnetworkvulnerability

All articles mentioning it

Advisories and references

• support.omadanetworks.com/en/document/108456/
• omadanetworks.com/us/business-networking/all-omada-router/
• omadanetworks.com/us/business-networking/omada-pro-router-wired-rout...
• tp-link.com/us/business-networking/soho-festa-gateway/
• forescout.com/blog/new-tp-link-router-vulnerabilities-a-primer-on-ro...