PT-2026-25325 · Tp Link Systems+1 · Sg2005P-Pd 1.X+100

Tangrs · Published 2026-03-13 · Updated 2026-05-08 · CVE-2026-1668

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Omada switches (affected versions not specified)

Description The web interface on Omada switches does not properly validate external inputs, potentially leading to out-of-bound memory access when processing specially crafted requests. This flaw could allow an unauthenticated attacker with network access to cause memory corruption, service instability, or information disclosure. Successful exploitation may result in remote code execution or denial-of-service. The web interface is susceptible to this issue when handling requests. The vulnerability involves inadequate input validation, which can lead to memory corruption.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Memory Corruption

Weakness Enumeration

CWE-20

CWE-787

Related Identifiers

CVE-2026-1668

Affected Products

Sg2005P-Pd 1.X

Sg2008 4.2X

Sg2008 4.3X

Sg2008P 3.2X

Sg2008P 3.3X

Sg2016P 1.2X

Sg2016P 1.3X

Sg2210Mp 4.2X

Sg2210Mp 5.2X

Sg2210Mp 5.X

Sg2210P 5.2X

Sg2210P 5.3X

Sg2210Xmp-M2 1.X

Sg2218 1.2X

Sg2218 1.3X

Sg2218P 1.2X

Sg2218P 2.2X

Sg2218P 2.X

Sg2428Lp 1.X

Sg2428P 5.2X

Sg2428P 5.3X

Sg2452Lp 1.X

Sg3210 3.2X

Sg3210 3.3X

Sg3210X-M2 1.2X

Sg3210X-M2 1.X

Sg3210Xhp-M2 3.X

Sg3218Xp-M2 1.X

Sg3428 2.3X

Sg3428 2.4X

Sg3428Mp 6.2X

Sg3428Mp 6.3X

Sg3428X 1.3X

Sg3428X 1.4X

Sg3428X-M2 1.2X

Sg3428Xf 1.2X

Sg3428Xf 1.3X

Sg3428Xmp 3.2X

Sg3428Xmp 3.3X

Sg3428Xmpp 1.2X

Sg3428Xmpp 1.X

Sg3428Xpp-M2 1.2X

Sg3452 1.2X

Sg3452 1.3X

Sg3452P 3.3X

Sg3452P 3.4X

Sg3452X 1.2X

Sg3452X 1.3X

Sg3452Xmpp 1.X

Sg3452Xp 2.2X

Sg3452Xp 2.3X

Sl2428P 6.2X

Sx3008F 1.2X

Sx3016F 1.2X

Sx3016F 1.3X

Sx3032F 1.X

Sx3206Hpp 1.20

Sx3832 1.X

Sx3832Mpp 1.X

Tl-Sg2428P 4.X

Tl-Sg3428Mp 5.X

Tl-Sg3452P 3.0

Omada Sg2005P-Pd Firmware

Omada Sg2008 Firmware

Omada Sg2008P Firmware

Omada Sg2016P Firmware

Omada Sg2210Mp Firmware

Omada Sg2210P Firmware

Omada Sg2210Xmp-M2 Firmware

Omada Sg2218 Firmware

Omada Sg2218P Firmware

Omada Sg2428Lp Firmware

Omada Sg2428P Firmware

Omada Sg2452Lp Firmware

Omada Sg3210 Firmware

Omada Sg3210X-M2 Firmware

Omada Sg3210Xhp-M2 Firmware

Omada Sg3218Xp-M2 Firmware

Omada Sg3428 Firmware

Omada Sg3428Mp Firmware

Omada Sg3428X-M2 Firmware

Omada Sg3428X Firmware

Omada Sg3428Xf Firmware

Omada Sg3428Xmp Firmware

Omada Sg3428Xmpp Firmware

Omada Sg3428Xpp-M2 Firmware

Omada Sg3452 Firmware

Omada Sg3452P Firmware

Omada Sg3452X Firmware

Omada Sg3452Xmpp Firmware

Omada Sg3452Xp Firmware

Omada Sl2428P Firmware

Omada Sx3008F Firmware

Omada Sx3016F Firmware

Omada Sx3032F Firmware

Omada Sx3206Hpp Firmware

Omada Sx3832 Firmware

Omada Sx3832Mpp Firmware

Omada Tl-Sg2428P Firmware

Omada Tl-Sg3428Mp Firmware

Omada Tl-Sg3452P Firmware

References · 9

• https://support.omadanetworks.com/us/document/118794 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-1668 · Security Note
• https://support.omadanetworks.com/us/product · Patch
• https://support.omadanetworks.com/au/download/firmware · Patch
• https://support.omadanetworks.com/en/download/firmware · Patch
• https://twitter.com/Komodosec/status/2052569067010326934 · Twitter Post
• https://twitter.com/CVEnew/status/2032605926025204127 · Twitter Post
• https://twitter.com/cyberbivash/status/2032547981388353730 · Twitter Post
• https://twitter.com/infoflowcloud/status/2032606816807313700 · Twitter Post