Do Son TP-Link fixes critical IDOR (CVE-2025-9520) in Omada Controller allowing admins to hijack Owner accounts. Update now to prevent total network takeover.
TP-Link Omada
TP-Link patched four critical RCE/command injection flaws in its Omada gateways. CVE-2025-6542 (CVSS 9.3) allows unauthenticated remote OS command execution. Update firmware immediately.