v1 vulnerabilities

2 known vulnerabilities in v1 from TP-Link. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.4 High severity

  ER7212PC v2: Cleartext Transmission of Sensitive Information

  CVE-2026-19683Aug 20, 2026TP-Link

  A vulnerability exists in the Dynamic DNS (DDNS) functionality of TP-Link Omada Gateways. During communication with a third-party DDNS service, authentication credentials are transmitted over an unencrypted channel. An attacker who can observe or manipulate tr

• 9.8 Critical severity

  ER7212PC v2: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-19586Aug 20, 2026TP-LinkEPSS 5.77%

  A pre-authentication OS command injection vulnerability has been identified in Omada gateways configured to operate as an OpenVPN Server due to insufficient validation of client-supplied data during OpenVPN connection establishment. An unauthenticated remote a