October 4, 2026
ITENESFRDE
CyberWorldOpsCyber Security · Threat Intelligence · CVE
Newsletter
Latest

CVE-2025-7850

High7.2Published on October 21, 2025

A command injection vulnerability may be exploited after the admin's authentication on the web portal on Omada gateways.

CVSS score7.2 / 10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness type (CWE)CWE-78
Vendorstp-link

Affected products

VendorsProductVersions
tp-linker8411 firmware< 1.3.3
tp-linker8411-
tp-linker7412-m2 firmware< 1.1.0
tp-linker7412-m2-
tp-linker707-m2 firmware< 1.3.1
tp-linker707-m2-
tp-linker7206 firmware< 2.2.2
tp-linker7206-
tp-linker605 firmware< 2.3.1
tp-linker605-
tp-linker706w firmware< 1.2.1
tp-linker706w-
tp-linker706w-4g firmware< 1.2.1
tp-linker706w-4g-
tp-linker7212pc firmware< 2.1.3
tp-linker7212pc-
tp-linkg36 firmware< 1.1.4
tp-linkg36-
tp-linkg611 firmware< 1.2.2
tp-linkg611-
tp-linkfr365 firmware< 1.1.10
tp-linkfr365-
tp-linkfr205 firmware< 1.0.3
tp-linkfr205-
tp-linkfr307-m2 firmware< 1.2.5

Related articles

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database