TP Link Systems Inc. Omada Cloud Controller

• CVE-2025-9292 Low 2.0 Permissive Web Security Policy Allows Cross-Origin Access Control Bypass on Omada Cloud Controllers 0.4%
• CVE-2025-9290 Medium 6.0 Authentication Weakness on Omada Controllers, Gateways and Access Points 0.2%
• CVE-2025-9289 Medium 5.7 Cross-Site Scripting (XSS) on Omada Controllers 0.2%