Signal is active with 4 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A permissive web security configuration may allow cross-origin restrictions enforced by modern browsers to be bypassed under specific circumstances. Exploitation requires the presence of an existing client-side injection vulnerability and user access to the affected web interface. Successful exploitation could allow unauthorized disclosure of sensitive information. Fixed in updated Omada Cloud Controller service versions deployed automatically by TP‑Link. No user action is required.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2025-9292 A permissive web security configuration may allow cross-origin restrictions enforced by modern browsers to be bypassed under specific circumstances. Exploitation requi… https://www.cve.org/CVERecord?id=CVE-2025-9292
Post summary
The text announces CVE‑2025‑9292, describing a permissive web security configuration that could allow cross‑origin restrictions to be bypassed.
@rangeva @VulmonFeeds Related but distinct: CVE-2025-9292 affects Omada Cloud Controllers with a cross-origin bypass (low severity, 2.0). #Vulnerability #CVE
Post summary
CVE-2025-9292 is a low‑severity cross‑origin bypass vulnerability in Omada Cloud Controllers, with no evidence of PoC, exploitation, or patch mentioned.
@VulmonFeeds This CVE appears alongside **CVE-2025-9292** (CVSS 2.0/Low) in the same TP-Link advisory, affecting Omada Cloud Controllers with a permissive web security policy allowing cross-origin bypass. #CVE #Vulnerability
Post summary
A new CVE (CVE‑2025‑9292) is disclosed in a TP‑Link advisory for Omada Cloud Controllers, noting a low‑severity cross‑origin bypass due to a permissive web security policy.
⚡ New CVE Alert: CVE-2025-9292 📊 Severity: 2.0 🚨 Risk Level: Low 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-9292 #CVE-2025-9292 #CVE #Low #CyberSecurity #InfoSec https://t.co/Pigc5APSbB
Post summary
The tweet announces CVE-2025-9292, noting its low severity and linking to the NVD entry for further details.
14 of 14 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | tp-link | aginet | - | - | - |
| App | tp-link | deco | - | - | - |
| App | tp-link | festa | - | - | - |
| App | tp-link | kasa | - | - | - |
| App | tp-link | kidshield | - | - | - |
| App | tp-link | omada | - | - | - |
| App | tp-link | omada_guard | - | - | - |
| App | tp-link | tapo | - | - | - |
| App | tp-link | tether | - | - | - |
| App | tp-link | tp-partner | - | - | - |
| App | tp-link | tpcamera | - | - | - |
| App | tp-link | vigi | - | - | - |
| App | tp-link | wi-fi_navi | - | - | - |
| App | tp-link | wifi_toolkit | - | - | - |