Critical Vulnerabilities Patched in TP-Link’s Omada Gateways

TP-Link has warned that several vulnerabilities affect Omada gateway devices, with more than a dozen ER, G and FR series models impacted and patches released for each. The most serious flaw is CVE-2025-6542, which carries a CVSS score of 9.3 and can allow a remote, unauthenticated attacker to execute arbitrary OS commands on the targeted system. A second critical issue, CVE-2025-7850, is described as a command injection flaw that can be exploited by an attacker who has admin access to the Omada web portal.

The remaining two vulnerabilities are rated high: CVE-2025-7851 can let an attacker obtain root access to a device, and CVE-2025-6541 can be exploited for OS command execution by an authenticated attacker. TP-Link advises customers not only to update the device firmware but also to change its password. It’s worth noting that threat actors are known to exploit TP-Link product vulnerabilities in attacks, according to SecurityWeek. The article was published on 22 October 2025.