CVE-2026-1668

published 2026-03-13

CVE-2026-1668: The web interface on multiple Omada switches does not adequately validate certain external inputs, which may lead to out-of-bound memory access when processing…

Priority P2 65 critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

The web interface on multiple Omada switches does not adequately validate certain external inputs, which may lead to out-of-bound memory access when processing crafted requests. Under specific conditions, this flaw may result in unintended command execution.An unauthenticated attacker with network access to the affected interface may cause memory corruption, service instability, or information disclosure. Successful exploitation may allow remote code execution or denial-of-service.

Affected

123 ranges · showing 25

Vendor	Product	Version range	Fixed in
tp-link	omada_sg2005p-pd_firmware	>= 1.0.0 < 1.0.19	1.0.19
tp-link	omada_sg2008_firmware	>= 4.20.0 < 4.20.17	4.20.17
tp-link	omada_sg2008_firmware	>= 4.30.0 < 4.30.1	4.30.1
tp-link	omada_sg2008p_firmware	>= 3.20.0 < 3.20.17	3.20.17
tp-link	omada_sg2008p_firmware	>= 3.30.0 < 3.30.1	3.30.1
tp-link	omada_sg2016p_firmware	>= 1.20.0 < 1.20.17	1.20.17
tp-link	omada_sg2016p_firmware	>= 1.30.0 < 1.30.1	1.30.1
tp-link	omada_sg2210mp_firmware	>= 4.20.0 < 4.20.18	4.20.18
tp-link	omada_sg2210mp_firmware	>= 5.0.0 < 5.0.15	5.0.15
tp-link	omada_sg2210mp_firmware	>= 5.20.0 < 5.20.1	5.20.1
tp-link	omada_sg2210p_firmware	>= 5.20.0 < 5.20.18	5.20.18
tp-link	omada_sg2210p_firmware	>= 5.30.0 < 5.30.1	5.30.1
tp-link	omada_sg2210xmp-m2_firmware	>= 1.0.0 < 1.0.19	1.0.19
tp-link	omada_sg2218_firmware	>= 1.20.0 < 1.20.17	1.20.17
tp-link	omada_sg2218_firmware	>= 1.30.0 < 1.30.1	1.30.1
tp-link	omada_sg2218p_firmware	>= 1.20.0 < 1.20.17	1.20.17
tp-link	omada_sg2218p_firmware	>= 2.0.0 < 2.0.14	2.0.14
tp-link	omada_sg2218p_firmware	>= 2.20.0 < 2.20.2	2.20.2
tp-link	omada_sg2428lp_firmware	>= 1.0.0 < 1.0.13	1.0.13
tp-link	omada_sg2428p_firmware	>= 5.20.0 < 5.20.20	5.20.20
tp-link	omada_sg2428p_firmware	>= 5.30.0 < 5.30.16	5.30.16
tp-link	omada_sg2452lp_firmware	>= 1.0.0 < 1.0.13	1.0.13
tp-link	omada_sg3210_firmware	>= 3.20.0 < 3.20.17	3.20.17
tp-link	omada_sg3210_firmware	>= 3.30.0 < 3.30.1	3.30.1
tp-link	omada_sg3210x-m2_firmware	>= 1.20.0 < 1.20.1	1.20.1

CVSS provenance

nvd v3.1 9.8 CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvd v4.0 7.7 HIGH CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-20 CWE-787