CVE-2026-1668

The web interface on multiple Omada switches does not adequately validate certain external inputs, which may lead to out-of-bound memory access when processing crafted requests. Under specific conditions, this flaw may result in unintended command execution.<br>An unauthenticated attacker with network access to the affected interface may cause memory corruption, service instability, or information disclosure. Successful exploitation may allow remote code execution or denial-of-service.

• tp-link omada sg2005p-pd firmware (>= 1.0.0 < 1.0.19) • tp-link omada sg2008 firmware (>= 4.20.0 < 4.20.17) • tp-link omada sg2008 firmware (>= 4.30.0 < 4.30.1) • tp-link omada sg2008p firmware (>= 3.20.0 < 3.20.17) • tp-link omada sg2008p firmware (>= 3.30.0 < 3.30.1) • tp-link omada sg2016p firmware (>= 1.20.0 < 1.20.17) • tp-link omada sg2016p firmware (>= 1.30.0 < 1.30.1) • tp-link omada sg2210mp firmware (>= 4.20.0 < 4.20.18) • tp-link omada sg2210mp firmware (>= 5.0.0 < 5.0.15) • tp-link omada sg2210mp firmware (>= 5.20.0 < 5.20.1) • tp-link omada sg2210p firmware (>= 5.20.0 < 5.20.18) • tp-link omada sg2210p firmware (>= 5.30.0 < 5.30.1) • tp-link omada sg2210xmp-m2 firmware (>= 1.0.0 < 1.0.19) • tp-link omada sg2218 firmware (>= 1.20.0 < 1.20.17) • tp-link omada sg2218 firmware (>= 1.30.0 < 1.30.1) • tp-link omada sg2218p firmware (>= 1.20.0 < 1.20.17) • tp-link omada sg2218p firmware (>= 2.0.0 < 2.0.14) • tp-link omada sg2218p firmware (>= 2.20.0 < 2.20.2) • tp-link omada sg2428lp firmware (>= 1.0.0 < 1.0.13) • tp-link omada sg2428p firmware (>= 5.20.0 < 5.20.20) • tp-link omada sg2428p firmware (>= 5.30.0 < 5.30.16) • tp-link omada sg2452lp firmware (>= 1.0.0 < 1.0.13) • tp-link omada sg3210 firmware (>= 3.20.0 < 3.20.17) • tp-link omada sg3210 firmware (>= 3.30.0 < 3.30.1) • tp-link omada sg3210xhp-m2 firmware (>= 3.0.0 < 3.0.21) • tp-link omada sg3210x-m2 firmware (>= 1.20.0 < 1.20.1) • tp-link omada sg3218xp-m2 firmware (>= 1.0.0 < 1.0.19) • tp-link omada sg3428 firmware (>= 2.30.0 < 2.30.16) • tp-link omada sg3428 firmware (>= 2.40.0 < 2.40.1) • tp-link omada sg3428mp firmware (>= 6.20.0 < 6.20.20) • tp-link omada sg3428mp firmware (>= 6.30.0 < 6.30.1) • tp-link omada sg3428x firmware (>= 1.30.0 < 1.30.17) • tp-link omada sg3428x firmware (>= 1.40.0 < 1.40.1) • tp-link omada sg3428xf firmware (>= 1.20.0 < 1.20.16) • tp-link omada sg3428xf firmware (>= 1.30.0 < 1.30.1) • tp-link omada sg3428x-m2 firmware (>= 1.20.0 < 1.20.18) • tp-link omada sg3428xmp firmware (>= 3.20.0 < 3.20.21) • tp-link omada sg3428xmp firmware (>= 3.30.0 < 3.30.1) • tp-link omada sg3428xmpp firmware (>= 1.0.0 < 1.0.16) • tp-link omada sg3428xmpp firmware (>= 1.20.0 < 1.20.1) • tp-link omada sg3428xpp-m2 firmware (>= 1.20.0 < 1.20.19) • tp-link omada sg3452 firmware (>= 1.20.0 < 1.20.17) • tp-link omada sg3452 firmware (>= 1.30.0 < 1.30.1) • tp-link omada sg3452p firmware (>= 3.30.0 < 3.30.17) • tp-link omada sg3452p firmware (>= 3.40.0 < 3.40.1) • tp-link omada sg3452x firmware (>= 1.20.0 < 1.20.18) • tp-link omada sg3452x firmware (>= 1.30.0 < 1.30.1) • tp-link omada sg3452xmpp firmware (>= 1.0.0 < 1.0.15) • tp-link omada sg3452xp firmware (>= 2.20.0 < 2.20.20) • tp-link omada sg3452xp firmware (>= 2.30.0 < 2.30.1) • tp-link omada sl2428p firmware (>= 6.20.0 < 6.20.18) • tp-link omada sx3008f firmware (>= 1.20.0 < 1.20.12) • tp-link omada sx3016f firmware (>= 1.20.0 < 1.20.16) • tp-link omada sx3016f firmware (>= 1.30.0 < 1.30.1) • tp-link omada sx3032f firmware (>= 1.0.0 < 1.0.15) • tp-link omada sx3206hpp firmware (>= 1.20.0 < 1.20.12) • tp-link omada sx3832 firmware (>= 1.0.0 < 1.0.12) • tp-link omada sx3832mpp firmware (>= 1.0.0 < 1.0.11) • tp-link omada tl-sg2428p firmware (>= 4.0.0 < 4.0.26) • tp-link omada tl-sg3428mp firmware (>= 5.0.0 < 5.0.25) … and 1 more