CVE-2025-15630 — Device Provisioning Race Condition in TP-Link Omada Adoption Workflow
A race condition exists in the cloud-based Omada device adoption process when an attacker may be able to interact with the adoption workflow before a legitimate device completes…
Published: 2026-08-03 · CVSS: 5.8 · CVSS 4.0
A race condition exists in the cloud-based Omada device adoption process when an attacker may be able to interact with the adoption workflow before a legitimate device completes registration, resulting in provisioning information being delivered to an attacker. Successful exploitation may allow disclosure of provisioning information intended for a legitimate device.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7