CVE Intelligence

Vulnerabilidades do TP-Link Systems Inc. OC2000 v2

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam TP-Link Systems Inc. OC2000 v2: 1 registro(s), com versões afetadas e correções.

CVE-2026-84941 Média · 6.9 CWE-611 10/09/2026
Omada Controller XML External Entity (XXE) Injection in SAML IdP Metadata Parsing Leading to Arbitrary Local File Read
An information disclosure vulnerability in the SAML Single Sign-On (SSO) functionality of Omada Controller allows an authenticated user with SAML configuration privileges to access sensitive information due to insufficient validation of user-supplied SAML metadata. Successful exploitation could result in unauthorized disclosure of sensitive information.