CVE-2025-9520

Publication date

2026-01-26 19:34:44

Family

TPLink

State

PUBLISHED

Description

An IDOR vulnerability exists in Omada Controllers that allows an attacker with Administrator permissions to manipulate requests and potentially hijack the Owner account.