[NEW] [high] TP-Link Omada Gateway: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in TP-Link Omada Gateway to execute arbitrary code, disclose information, manipulate files, and conduct a denial of service attack.
CSIRTS triage
- What
- Multiple vulnerabilities in TP-Link Omada Gateway enable arbitrary code execution, information disclosure, file manipulation, and denial of service.
- Who is affected
- TP-Link Omada Gateway deployments.
- Urgency
- High: severity rated high; no active exploitation reported but code execution capability is critical.
- Action
- Check TP-Link advisories for patched Omada Gateway versions and apply updates.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch Omada Gateway
Get an email when a new Omada Gateway advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2964
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Moderate exploitation riskCVE-2026-195865.0% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 92% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-196830.29% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 22% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2026-90330.18% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 8% of all EPSS-scored CVEs.
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-19586 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-19683 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-9033 | coverage & exploitation status | NVD · CVE.org |
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- unknownCVE-2026-9033: An unauthenticated attacker with network access to the captive portal service of an affected de…nvd
- unknownCVE-2026-19683: A vulnerability exists in the Dynamic DNS (DDNS) functionality of TP-Link Omada Gateways. Duri…nvd
- unknownCVE-2026-19586: A pre-authentication OS command injection vulnerability has been identified in Omada gateways …nvd
More from CERT-Bund (BSI) Security Advisories
- high[NEW] [high] Linux Kernel: Multiple vulnerabilities2026-08-25
- medium[NEW] [medium] libTIFF: Multiple Vulnerabilities2026-08-25
- high[NEW] [high] Contao: Multiple Vulnerabilities2026-08-25
- medium[NEW] [medium] Django: Multiple Vulnerabilities2026-08-25
- high[NEW] [high] Red Hat Enterprise Linux (Apicurio Registry): Multiple Vulnerabilities2026-08-25