CVE-2025-9290 - Authentication Weakness on Omada Controllers, Gateways and Access Points

CVE-2025-9290 - Authentication Weakness on Omada Controllers, Gateways and Access Points

CVE ID : CVE-2025-9290 Published : Jan. 22, 2026, 11:14 p.m. | 1 hour ago Description : An authentication weakness was identified in Omada Controllers, Gateways and Access Points, controller-device adoption due to improper handling of random values. Exploitation requires advanced network positioning and allows an attacker to intercept adoption traffic and forge valid authentication through offline precomputation, potentially exposing sensitive information and compromising confidentiality. Severity: 6.0 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
MEDIUM
Published
Jan. 22, 2026
Attack Vector: network