Skip to content

CVE record · 1 source

CVE-2026-102298

In Omada Controller MSP mode, the user-confirmation endpoint fails to enforce the required permission check.

Vendor: TP-Link
Product: TP-Link routers / Omada / Tapo
Exposure class: Edge / VPN / firewall

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

12

CVE NVD 20d ago

In Omada Controller MSP mode, the user-confirmation endpoint fails to enforce the required permission check.

In Omada Controller MSP mode, the user-confirmation endpoint fails to enforce the required permission check. An authenticated user can supply a caller-controlled Identifier parameter to validate credentials for another account…

CVE-2026-102298 TP-Link