CVE-2025-9520 — IDOR Leading to Owner Account Hijacking in Omada Controller
An IDOR vulnerability exists in Omada Controllers that allows an attacker with Administrator permissions to manipulate requests and potentially hijack the Owner account.
Published: 2026-01-26 · CVSS: 8.3 · CVSS 4.0
An IDOR vulnerability exists in Omada Controllers that allows an attacker with Administrator permissions to manipulate requests and potentially hijack the Owner account.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7