{"id":"CVE-2025-9291","url":"https://www.cyber-defence.io/tools/cve/CVE-2025-9291","generatedAt":"2026-10-28T01:19:13.442Z","title":"A certification validation weakness exists in communication between affected Omada devices and cloud controllers.","description":"A\ncertification validation weakness exists in communication between affected\nOmada devices and cloud controllers. Certificate identity verification does not\nadequately validate that a presented certificate corresponds to the expected\ncloud controller hostname, which may allow certificate validation protections\nto be bypassed under specific conditions.\n\n\n\n\n\nSuccessful\nexploitation may allow interception or modification of communication between\naffected devices and cloud controllers.","published":"2026-08-03T18:16:34.000Z","lastModified":"2026-09-29T14:10:00.000Z","status":"Analyzed","sourceIdentifier":"f23511db-6c3e-4e32-a477-6aa17d310630","cvss":{"version":"4.0","score":7.7,"severity":"HIGH","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M"},"cwe":["CWE-295"],"affected":["tp-link/omada fusion 2.5g firmware","tp-link/omada er707-m2 firmware","tp-link/omada er7206 firmware","tp-link/omada er706w firmware","tp-link/omada er8411 firmware","tp-link/omada er605 firmware","tp-link/omada er7412-m2 firmware","tp-link/omada er706w-4g firmware","tp-link/omada er703wp-4g-outdoor firmware","tp-link/omada er706wp-4g firmware","tp-link/omada s7500-24y4c firmware","tp-link/omada s7500-26xf6y firmware","tp-link/omada s6500-48mpp6y firmware","tp-link/omada s6500-24mpp4y firmware","tp-link/omada s6500-48gp6xf firmware","tp-link/omada s6500-48g6xf firmware","tp-link/omada s6500-24gp4xf firmware","tp-link/omada s6500-24g4xf firmware","tp-link/omada sx6632yf firmware","tp-link/omada sx3032f firmware","tp-link/omada sx3016f firmware","tp-link/omada sx3008f firmware","tp-link/omada sg3428xf firmware","tp-link/omada sx3832mpp firmware","tp-link/omada sx3832 firmware","tp-link/omada sx3206hpp firmware","tp-link/omada sg3428xpp-m2 firmware","tp-link/omada sg3428x-m2 firmware","tp-link/omada sg3218xp-m2 firmware","tp-link/omada sg3210xhp-m2 firmware","tp-link/omada sg3210x-m2 firmware","tp-link/omada sg2210xmp-m2 firmware","tp-link/omada sg6654xhp firmware","tp-link/omada sg6654x firmware","tp-link/omada sg6428xhp firmware","tp-link/omada sg6428x firmware","tp-link/omada sg5452xmpp firmware","tp-link/omada sg5452x firmware","tp-link/omada sg5428xmpp firmware","tp-link/omada sg5428x firmware","tp-link/omada sg3452xmpp firmware","tp-link/omada sg3452xp firmware","tp-link/omada tl-sg3452x firmware","tp-link/omada sg3428xmpp firmware","tp-link/omada sg3428xmp firmware","tp-link/omada sg3428x firmware","tp-link/omada sg2005p-pd firmware","tp-link/omada sg3452p firmware","tp-link/omada sg3452 firmware","tp-link/omada sg3428mp firmware","tp-link/omada sg3428 firmware","tp-link/omada sg3210 firmware","tp-link/omada tl-sg3210 firmware","tp-link/omada sg2452lp firmware","tp-link/omada sg2428p firmware","tp-link/omada sg2428lp firmware","tp-link/omada sg2218p firmware","tp-link/omada sg2218 firmware","tp-link/omada sg2016p firmware","tp-link/omada sg2210mp firmware"],"epss":{"score":0.00216,"percentile":0.11917,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.22%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://support.omadanetworks.com/en/download/firmware/","tags":["Product"],"source":"f23511db-6c3e-4e32-a477-6aa17d310630"},{"url":"https://support.omadanetworks.com/us/download/firmware/","tags":["Product"],"source":"f23511db-6c3e-4e32-a477-6aa17d310630"},{"url":"https://www.tp-link.com/us/support/faq/5216/","tags":["Vendor Advisory"],"source":"f23511db-6c3e-4e32-a477-6aa17d310630"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2025-9291","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}