CVE-2026-81531 — Unauthenticated Account Information Disclosure in Multiple Omada Controllers
An information disclosure vulnerability has been identified in Omada Controller. An API endpoint intended for Controller initialization remains accessible after completion and …
Published: 2026-09-08 · CVSS: 6.9 · CVSS 4.0
An information disclosure vulnerability has been identified in Omada Controller. An API endpoint intended for Controller initialization remains accessible after completion and may disclose account-related information to unauthenticated remote users. Successful exploitation may allow an attacker to remote query the affected endpoint that may facilitate user enumeration and subsequent attacks targeting administrative accounts.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7