🔐 CVE Alert

CVE-2025-15627

UNKNOWN 0.0

Hardcoded Cryptographic Keys in TP-Link Omada Adoption Protocol Authentication

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

A cryptographic weakness exists in the Omada adoption protocol.  The protocol relies on hard-coded cryptographic keys to establish trust and protect authentication exchanges between controllers and managed devices during device adoption. An attacker may be able to impersonate trusted controllers or managed devices and gain access to sensitive adoption-related communications.

CWE CWE-321
Vendor tp-link systems inc.
Product omada gateways
Published Aug 3, 2026
Last Updated Aug 3, 2026
Stay Ahead of the Next One

Get instant alerts for tp-link systems inc. omada gateways

Be the first to know when new unknown vulnerabilities affecting tp-link systems inc. omada gateways are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

TP-Link Systems Inc. / Omada Gateways
0
TP-Link Systems Inc. / Omada Switches
0
TP Link Systems Inc. / Omada Access Points
0
TP-Link Systems Inc / Omada Controllers
0

References

NVD ↗ CVE.org ↗ EPSS Data ↗
omadanetworks.com: https://www.omadanetworks.com/us/support/download/ omadanetworks.com: https://www.omadanetworks.com/en/support/download/ tp-link.com: https://www.tp-link.com/us/support/faq/5216/

Credits

Stanislav Dashevskyi and Francesco La Spina of Forescout Technologies