TP Link Systems Inc. Omada Software Controller

• CVE-2026-107795 High 7.5 Improper Authorization in TP-Link Omada Controller TLS Certificate and Private Key Management API 0.2%
• CVE-2025-9290 Medium 6.0 Authentication Weakness on Omada Controllers, Gateways and Access Points 0.2%
• CVE-2025-9289 Medium 5.7 Cross-Site Scripting (XSS) on Omada Controllers 0.2%