TP Link Systems Inc. OC220 v2

• CVE-2026-84941 Medium 6.9 Omada Controller XML External Entity (XXE) Injection in SAML IdP Metadata Parsing Leading to Arbitrary Local File Read 0.5%
• CVE-2026-81531 Medium 6.9 Unauthenticated Account Information Disclosure in Multiple Omada Controllers 0.7%