Story perspectives

TP-Link Warns of Critical Vulnerabilities in Omada Gateways

10/22/2025

30 6

Summary

Story summary

TP-Link's Omada gateway devices face critical vulnerabilities, including CVE-2025-6542 (CVSS 9.3) that could allow remote, unauthenticated attackers to execute arbitrary commands.
The vulnerabilities affect multiple Omada gateway models, and CVE-2025-7850 requires admin access, while two high-severity flaws could grant root access.
TP-Link urges users to update firmware and change passwords to mitigate risk.
TP-Link has not confirmed exploitation but recommends prompt action to secure devices.

1 of 1

Story summary

TP-Link's Omada gateway devices face critical vulnerabilities, including CVE-2025-6542 (CVSS 9.3) that could allow remote, unauthenticated attackers to execute arbitrary commands.
The vulnerabilities affect multiple Omada gateway models, and CVE-2025-7850 requires admin access, while two high-severity flaws could grant root access.
TP-Link urges users to update firmware and change passwords to mitigate risk.
TP-Link has not confirmed exploitation but recommends prompt action to secure devices.