Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An IDOR vulnerability exists in Omada Controllers that allows an attacker with Administrator permissions to manipulate requests and potentially hijack the Owner account.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-01-29 | 1 | General1 |
| 2026-03-12 | 1 | Disclosure1 |
⚠️ Vulnerabilidad en productos TP-Link ❗ CVE-2025-9520 ➡️ Más info: https://www.cert.gov.py/vulnerabilidad-en-productos-tp-link-2/ https://t.co/eHDLTgAlLh
Post summary
The tweet merely announces CVE-2025-9520 for TP-Link products and links to an external page for more details, without providing any technical, exploit, or mitigation information.
🔴 Omada Controller Privilege Escalation, #CVE-2025-9520 (High) https://dailycve.com/omada-controller-privilege-escalation-cve-2025-9520-high/
Post summary
The tweet announces the discovery of a high‑severity privilege escalation vulnerability (CVE‑2025‑9520) and links to an external site with further details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | tp-link | omada_controller | - | - | - |