TP-Link Patches Four Omada Gateway Flaws, Two Allow Remote Code Execution

According to The Hacker News, TP-Link has released security updates for four Omada gateway flaws, two of which could allow remote code execution. The disclosed vulnerabilities include CVE-2025-6541 (CVSS 8.6), CVE-2025-6542 (CVSS 9.3), CVE-2025-7850 (CVSS 9.3) and CVE-2025-7851 (CVSS 8.7), all described as operating system command injection or improper privilege management issues.

The advisory states that attackers may execute arbitrary commands on the device’s underlying operating system, and TP-Link lists affected models such as ER8411, ER7412-M2, ER707-M2, ER7206, ER605, ER706W, ER706W-4G, ER7212PC, G36, G611, FR365, FR205, and FR307-M2 with specific build versions. TP-Link urges users to update to the latest firmware to remedy the vulnerabilities, while advising customers to check device configurations after upgrades. The piece notes that TP-Link did not indicate active exploitation in the wild, and the coverage was published on 22 October 2025.