CVE-2025-15628 — Hardcoded Certificates in TP-Link Omada Device Communications
Affected Omada devices rely on embedded certificates that are shared across deployments to establish trust between controllers and managed devices. An attacker who obta…
Published: 2026-08-03 · CVSS: 8.2 · CVSS 4.0
Affected Omada devices rely on embedded certificates that are shared across deployments to establish trust between controllers and managed devices. An attacker who obtains the embedded certificates may be able to impersonate trusted controllers or devices and intercept affected communications.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7