CVE-2026-102298 | TP-Link System Omada Software Controller prior 6.3.0.45 User-confirmation Endpoint Identifier privileges management

October 15, 2026 Yanac

A vulnerability categorized as very critical has been discovered in TP-Link System Omada Software Controller. This affects an unknown part of the component User-confirmation Endpoint. Executing a manipulation of the argument Identifier can lead to improper privilege management.

This vulnerability is registered as CVE-2026-102298. It is possible to launch the attack remotely. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More