Not scored
CVE-2025-9520
IDOR Leading to Owner Account Hijacking in Omada Controller
TP-Link Systems Inc.Omada Controller
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
0.4%probability of exploitation in the next 30 days
Higher than 38% of scored CVEs
SeverityCVSS
–Not scored yet
Description NVD
An IDOR vulnerability exists in Omada Controllers that allows an attacker with Administrator permissions to manipulate requests and potentially hijack the Owner account.
Coverage 1 article · 1 outlet
- High-Severity IDOR Flaw Lets Admins Hijack TP-Link Omada Owner AccountsSecurityOnline · first in our coverage