Skip to content
CVE PROGRAM SOURCE RECORD8.3 High

CVE-2025-9520

IDOR Leading to Owner Account Hijacking in Omada Controller

Description

An IDOR vulnerability exists in Omada Controllers that allows an attacker with Administrator permissions to manipulate requests and potentially hijack the Owner account.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TP-Link Systems Inc. Omada Controller

Default version status: unknown

  • 0 to < 6.0affected

References