Riskcovery

CVE-2026-1668

Input Validation Vulnerability on Multiple Omada Switches

State
Published
Severity
7.7 High
Published
Mar 13, 2026
Updated
Mar 13, 2026
Reserved
Jan 29, 2026

Read the record on cve.org

Description

The web interface on multiple Omada switches does not adequately validate certain external inputs, which may lead to out-of-bound memory access when processing crafted requests. Under specific conditions, this flaw may result in unintended command execution.<br>An unauthenticated attacker with network access to the affected interface may cause memory corruption, service instability, or information disclosure. Successful exploitation may allow remote code execution or denial-of-service.

Scores

CVSSScoreVectorSource
4.07.7 HighCVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:NTPLink

Weaknesses

  • CWE-20 Improper Input Validation

Affected Products

ProductVersions
SG2008P 3.2xTP-Link Systems Inc.
  • before 3.20.17 Build 20260121 Rel.53429Affected
SG2008P 3.3xTP-Link Systems Inc.
  • before 3.30.1 Build 20260127 Rel.32017Affected
SX3016F 1.3xTP-Link Systems Inc.
  • before 1.30.1 Build 20260129 Rel.8831Affected
SX3016F 1.2xTP-Link Systems Inc.
  • before 1.20.16 Build 20260121 Rel.57953Affected
SG3428 2.4xTP-Link Systems Inc.
  • before 2.40.1 Build 20260127 Rel.39545Affected
SG3428XMP 3.3xTP-Link Systems Inc.
  • before 3.30.1 Build 20260127 Rel.39545Affected
SG3428X 1.4xTP-Link Systems Inc.
  • before 1.40.1 Build 20260127 Rel.39545Affected
SG3428XF 1.3xTP-Link Systems Inc.
  • before 1.30.1 Build 20260127 Rel.39545Affected
SG3452P 3.4xTP-Link Systems Inc.
  • before 3.40.1 Build 20260128 Rel.7041Affected
SG3428MP 6.3xTP-Link Systems Inc.
  • before 6.30.1 Build 20260127 Rel.39545Affected
SG2218P 2.2xTP-Link Systems Inc.
  • before 2.20.2 Build 20260127 Rel.32017Affected
SG2016P 1.3xTP-Link Systems Inc.
  • before 1.30.1 Build 20260127 Rel.32017Affected
SG3452XP 2.3xTP-Link Systems Inc.
  • before 2.30.1 Build 20260128 Rel.8721Affected
SG3428XMPP 1.2xTP-Link Systems Inc.
  • before 1.20.1 Build 20260127 Rel.39545Affected
SG3452X 1.3xTP-Link Systems Inc.
  • before 1.30.1 Build 20260128 Rel.8721Affected
SG2008 4.3xTP-Link Systems Inc.
  • before 4.30.1 Build 20260127 Rel.32017Affected
SG3210 3.3xTP-Link Systems Inc.
  • before 3.30.1 Build 20260206 Rel.33103Affected
SG2210MP 5.2xTP-Link Systems Inc.
  • before 5.20.1 Build 20260127 Rel.32017Affected
SG2210P 5.3xTP-Link Systems Inc.
  • before 5.30.1 Build 20260127 Rel.32017Affected
SG2218 1.3xTP-Link Systems Inc.
  • before 1.30.1 Build 20260127 Rel.32017Affected
SG3452 1.3xTP-Link Systems Inc.
  • before 1.30.1 Build 20260128 Rel.7041Affected
SG3210X-M2 1.2xTP-Link Systems Inc.
  • before 1.20.1 Build 20260129 Rel.13605Affected
SG2210XMP-M2 1.xTP-Link Systems Inc.
  • before 1.0.19 Build 20260121 Rel.53314Affected
SG2008 4.2xTP-Link Systems Inc.
  • before 4.20.17 Build 20260121 Rel.53429Affected
SG2218P 1.2xTP-Link Systems Inc.
  • before 1.20.17 Build 20260121 Rel.53429Affected
SG3210 3.2xTP-Link Systems Inc.
  • before 3.20.17 Build 20260121 Rel.53429Affected
SG3428X-M2 1.2xTP-Link Systems Inc.
  • before 1.20.18 Build 20260121 Rel.54271Affected
SX3832MPP 1.xTP-Link Systems Inc.
  • before 1.0.11 Build 20260121 Rel.56907Affected
SG2218 1.2xTP-Link Systems Inc.
  • before 1.20.17 Build 20260121 Rel.53429Affected
SX3832 1.xTP-Link Systems Inc.
  • before 1.0.12 Build 20260121 Rel.56907Affected
SG2428LP 1.xTP-Link Systems Inc.
  • before 1.0.15 Build 20260121 Rel.53429Affected
SL2428P 6.2xTP-Link Systems Inc.
  • before 6.20.18 Build 20260121 Rel.53429Affected
SG3218XP-M2 1.xTP-Link Systems Inc.
  • before 1.0.19 Build 20260121 Rel.53314Affected
SG3210XHP-M2 3.xTP-Link Systems Inc.
  • before 3.0.21 Build 20260121 Rel.53314Affected
SG2218P 2.xTP-Link Systems Inc.
  • before 2.0.14 Build 20260121 Rel.53429Affected
SG3210X-M2 1.xTP-Link Systems Inc.
  • before 1.0.19 Build 20260121 Rel.53314Affected
SG2428P 5.3xTP-Link Systems Inc.
  • before 5.30.16 Build 20260121 Rel.53429Affected
SG2210MP 4.2xTP-Link Systems Inc.
  • before 4.20.18 Build 20260121 Rel.53429Affected
SG3452P 3.3xTP-Link Systems Inc.
  • before 3.30.17 Build 20260121 Rel.54132Affected
SG3452 1.2xTP-Link Systems Inc.
  • before 1.20.17 Build 20260121 Rel.54132Affected
SG2452LP 1.xTP-Link Systems Inc.
  • before 1.0.13 Build 20260121 Rel.54132Affected
SX3032F 1.xTP-Link Systems Inc.
  • before 1.0.15 Build 20260121 Rel.56907Affected
SG3452X 1.2xTP-Link Systems Inc.
  • before 1.20.18 Build 20260121 Rel.55833Affected
SG3452XMPP 1.xTP-Link Systems Inc.
  • before 1.0.15 Build 20260121 Rel.55833Affected
SG3428XPP-M2 1.2xTP-Link Systems Inc.
  • before 1.20.19 Build 20260121 Rel.54271Affected
TL-SG3452P 3.0TP-Link Systems Inc.
  • before 3.0.22 Build 20260121 Rel.54132Affected
SG2428P 5.2xTP-Link Systems Inc.
  • before 5.20.20 Build 20260121 Rel.53429Affected
SG2210MP 5.xTP-Link Systems Inc.
  • before 5.0.15 Build 20260121 Rel.53429Affected
SG2005P-PD 1.xTP-Link Systems Inc.
  • before 1.0.19 Build 20260121 Rel.53429Affected
SG2016P 1.2xTP-Link Systems Inc.
  • before 1.20.17 Build 20260121 Rel.53429Affected
SG3452XP 2.2xTP-Link Systems Inc.
  • before 2.20.20 Build 20260121 Rel.55833Affected
SG3428XMP 3.2xTP-Link Systems Inc.
  • before 3.20.21 Build 20260113 Rel.67732Affected
SG3428X 1.3xTP-Link Systems Inc.
  • before 1.30.17 Build 20260113 Rel.67732Affected
SG3428XF 1.2xTP-Link Systems Inc.
  • before 1.20.16 Build 20260113 Rel.67732Affected
SG3428MP 6.2xTP-Link Systems Inc.
  • before 6.20.20 Build 20260113 Rel.67732Affected
TL-SG3428MP 5.xTP-Link Systems Inc.
  • before 5.0.25 Build 20260113 Rel.67732Affected
SG3428 2.3xTP-Link Systems Inc.
  • before 2.30.16 Build 20260113 Rel.67732Affected
SG3428XMPP 1.xTP-Link Systems Inc.
  • before 1.0.16 Build 20260113 Rel.67732Affected
TL-SG2428P 4.xTP-Link Systems Inc.
  • before 4.0.26 Build 20260121 Rel.53429Affected
SG2210P 5.2xTP-Link Systems Inc.
  • before 5.20.18 Build 20260121 Rel.53429Affected
SX3008F 1.2xTP-Link Systems Inc.
  • 0Affected
SX3206HPP 1.20TP-Link Systems Inc.
  • 0Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.