← CVE Intelligence

CVE-2025-9520

IDOR Leading to Owner Account Hijacking in Omada Controller PUBLISHED

Description (CNA)

An IDOR vulnerability exists in Omada Controllers that allows an attacker with Administrator permissions to manipulate requests and potentially hijack the Owner account.

Affected (CNA)

Vendor / productVersions
TP-Link Systems Inc. / Omada Controlleraffected 0 before 6.0

CWE

CWE-639

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.