CVE-2025-15631 — Weak Credential Storage in TP-Link Omada Devices
A cryptographic weakness exists in affected Omada devices where site credentials are protected using a legacy hashing algorithm that does not provide sufficient protection. …
Published: 2026-08-03 · CVSS: 5.7 · CVSS 4.0
A cryptographic weakness exists in affected Omada devices where site credentials are protected using a legacy hashing algorithm that does not provide sufficient protection. An attacker who obtains access to stored credential data may be able to recover valid credentials to gain unauthorized access to affected devices or management environments.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7