{"id": "CVE-2026-19683", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-19683", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-20T18:55:44.295305Z"}}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.4, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 2.2}], "cvssMetricV40": [{"type": "Secondary", "source": "f23511db-6c3e-4e32-a477-6aa17d310630", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 6.3, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "LOW", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "LOW", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "f23511db-6c3e-4e32-a477-6aa17d310630", "affectedData": [{"vendor": "TP-Link Systems Inc.", "product": "ER7212PC v2", "versions": [{"status": "affected", "version": "0", "lessThan": "2.4.3 Build 20260722 Rel.40250", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "ER605 v2", "versions": [{"status": "affected", "version": "0", "lessThan": "2.4.4 Build 20260630 Rel.14398", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "ER7206 v2", "versions": [{"status": "affected", "version": "0", "lessThan": "2.3.5 Build 20260625 Rel.43136", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc", "product": "ER7406 v1", "versions": [{"status": "affected", "version": "0", "lessThan": "1.3.4 Build 20260625 Rel.43136", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "ER707-M2 v1", "versions": [{"status": "affected", "version": "0", "lessThan": "1.4.4 Build 20260625 Rel.43063", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc", "product": "ER7412-M2 v1", "versions": [{"status": "affected", "version": "0", "lessThan": "1.2.0 Build 20260630 Rel.82947", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "ER8411 v1", "versions": [{"status": "affected", "version": "0", "lessThan": "1.4.1 Build 20260708 Rel.64832", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "ER706W v1", "versions": [{"status": "affected", "version": "0", "lessThan": "1.2.11 Build 20260723 Rel.41567", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "v1", "versions": [{"status": "affected", "version": "0", "lessThan": "1.2.6 Build 20260723 Rel.41321", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "ER706W-4G v2", "versions": [{"status": "affected", "version": "0", "lessThan": "2.1.11 Build 20260723 Rel.41624", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "ER706WP-4G v1", "versions": [{"status": "affected", "version": "0", "lessThan": "1.1.11 Build 20260723 Rel.41624", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "ER703WP-4G-Outdoor v1", "versions": [{"status": "affected", "version": "0", "lessThan": "1.1.7 Build 20260723 Rel.41712", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "DR3220v-4G v1", "versions": [{"status": "affected", "version": "0", "lessThan": "1.2.0 Build 20260630 Rel.82652", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "DR3650v v1", "versions": [{"status": "affected", "version": "0", "lessThan": "1.2.0 Build 20260630 Rel.83311", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "DR3650v-4G v1", "versions": [{"status": "affected", "version": "0", "lessThan": "1.2.0 Build 20260630 Rel.83347", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "ER603WP-4G-Outdoor v1", "versions": [{"status": "affected", "version": "0", "lessThan": "1.0.2 Build 20260723 Rel.43271", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "DR3150 v1", "versions": [{"status": "affected", "version": "0", "lessThan": "1.0.1 Build 20260722 Rel.16854", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "ER701-5G-Outdoor v1", "versions": [{"status": "affected", "version": "0", "lessThan": "1.0.3 Build 20260723 Rel.40931", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "ER605W v2", "versions": [{"status": "affected", "version": "0", "lessThan": "2.0.4 Build 20260723 Rel.43763", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2026-08-20T19:16:51.303", "references": [{"url": "https://www.omadanetworks.com/en/support/download/", "tags": ["Product"], "source": "f23511db-6c3e-4e32-a477-6aa17d310630"}, {"url": "https://www.omadanetworks.com/us/support/download/", "tags": ["Product"], "source": "f23511db-6c3e-4e32-a477-6aa17d310630"}, {"url": "https://www.tp-link.com/us/support/faq/5256/", "tags": ["Vendor Advisory"], "source": "f23511db-6c3e-4e32-a477-6aa17d310630"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "f23511db-6c3e-4e32-a477-6aa17d310630", "description": [{"lang": "en", "value": "CWE-319"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability exists in the Dynamic DNS (DDNS) functionality of TP-Link Omada Gateways. During communication with a third-party DDNS service, authentication credentials are transmitted over an unencrypted channel. An attacker who can\u00a0observe\u00a0or manipulate traffic between an affected device and the DDNS service may obtain sensitive authentication information or interfere with DDNS update operations. Exploitation requires DDNS to be configured, communication with an external DDNS service, and attacker visibility or control of the relevant network path.\u00a0\n\n\n\n\n\nSuccessful exploitation may result in disclosure of DDNS account credentials, unauthorized access to DDNS management functionality, or modification of DNS records associated with the affected deployment."}, {"lang": "es", "value": "Una vulnerabilidad existe en la funcionalidad de DNS Din\u00e1mico (DDNS) de los Gateways TP-Link Omada. Durante la comunicaci\u00f3n con un servicio DDNS de terceros, las credenciales de autenticaci\u00f3n se transmiten a trav\u00e9s de un canal no cifrado. Un atacante que puede observar o manipular el tr\u00e1fico entre un dispositivo afectado y el servicio DDNS puede obtener informaci\u00f3n de autenticaci\u00f3n sensible o interferir con las operaciones de actualizaci\u00f3n de DDNS. La explotaci\u00f3n requiere que el DDNS est\u00e9 configurado, comunicaci\u00f3n con un servicio DDNS externo, y visibilidad o control del atacante de la ruta de red relevante.\n\nLa explotaci\u00f3n exitosa puede resultar en la divulgaci\u00f3n de credenciales de cuenta DDNS, acceso no autorizado a la funcionalidad de gesti\u00f3n de DDNS, o la modificaci\u00f3n de registros DNS asociados con la implementaci\u00f3n afectada."}], "lastModified": "2026-10-26T10:10:00.140", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:er7212pc_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7D4F7E2D-BC8F-473D-938B-8E907538FB84", "versionEndExcluding": "2.4.3"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:er7212pc:2.0:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "939EE8A4-1CA6-495C-83B0-369B4367A402"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:er605_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D7DE29DB-20CA-4C32-A050-22C0C208683D", "versionEndExcluding": "2.4.4"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:er605:2.0:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "11B180B7-7FE9-4971-9F1A-9FD2A73FA9C3"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:er7206_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9FEBEB59-E7F4-45CE-A4FF-01169FB6D7A4", "versionEndExcluding": "2.3.5"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:er7206:2.0:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4B8866B3-837C-47E0-94DD-CE771083CCD6"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:er7406_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "36C3A9CA-B374-4B30-8647-867DCBDA888F", "versionEndExcluding": "1.3.4"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:er7406:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3064CDE7-9329-4D22-8853-B4EE6D050D4B"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:er707-m2_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5C8E5FC5-FB02-4884-8561-16462A7FB015", "versionEndExcluding": "1.4.4"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:er707-m2:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E45AF81F-1346-4FD8-9E38-CAB330D79AB6"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:er7412-m2_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "52DFB291-70BB-49C1-B50F-E084CDCE56D6", "versionEndExcluding": "1.2.0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:er7412-m2:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "FBB89DAE-6264-4F26-B34A-E1B84FB927D4"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:er8411_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "14F8B834-3A2F-4B8B-BF3C-4C915F9C91B2", "versionEndExcluding": "1.4.1"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:er8411:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4F2F16D8-5D7B-4E01-8BB3-F324B6011F72"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:er706w_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1DC2E6EB-47E1-4B3F-AE07-6E9C1120885E", "versionEndExcluding": "1.2.11"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:er706w:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "7D599C4B-4A58-45EC-BA17-332FBF6E9805"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:er706w-4g_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "41F765B0-E24B-4EED-AC37-B54638DFBD3F", "versionEndExcluding": "1.2.6"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:er706w-4g:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "559FA8D2-3055-41CB-81A4-A7996D93588D"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:er706w-4g_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2C596A89-C9E9-4F8E-BD9F-6B807E3D568E", "versionEndExcluding": "2.1.11"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:er706w-4g:2.0:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "DE1504A8-4FDC-44E0-9C97-2AC838DC4FBF"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:er706wp-4g_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8886DEC9-65FE-4D88-B829-7082B7F27B8E", "versionEndExcluding": "1.1.11"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:er706wp-4g:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CDF76B4C-3657-4C55-AC76-A31FC5A988A8"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:er703wp-4g-outdoor_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FFB8FCED-5F12-4631-857F-6F713558CA67", "versionEndExcluding": "1.1.7"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:er703wp-4g-outdoor:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "9984C375-4F11-4C3A-AB3D-9A23C4B9EE77"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:dr3220v-4g_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8F715148-236F-4EA0-9389-39AC93E3217C", "versionEndExcluding": "1.2.0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:dr3220v-4g:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CAA74D58-481A-40B3-BEC7-AD1782802C51"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:dr3650v_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "16677C43-4338-4444-BBA6-C3A05AF167E5", "versionEndExcluding": "1.2.0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:dr3650v:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CD34FB5F-D4EA-41E3-B625-78A8045AC916"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:dr3650v-4g_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "178A4ACF-15AB-4BAD-8EE9-1AB660220489", "versionEndExcluding": "1.2.0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:dr3650v-4g:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "121CBA17-EB12-4611-B05B-A39C8DE06410"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:er603wp-4g-outdoor_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C516C8C6-29EB-4614-B8B3-C1D15AED69E8", "versionEndExcluding": "1.0.2"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:er603wp-4g-outdoor:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "EE399BF3-D90E-4B4C-80B5-819715DC366F"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:dr3150_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "36033FDC-3905-4958-9B0E-2A834A4CDF80", "versionEndExcluding": "1.0.1"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:dr3150:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E4B44058-8C05-4A29-81A7-113B0B6BCAE2"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:er701-5g-outdoor_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F5D2B103-3A11-4F8D-B94E-E9394BF39A35", "versionEndExcluding": "1.0.3"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:er701-5g-outdoor:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2082ECC6-BC83-4D1A-A9E3-D8F3215D43E1"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:er605w_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6BEB928F-A260-4ADC-8AE7-EA118D6CBA4E", "versionEndExcluding": "2.0.4"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:er605w:2.0:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5AE8F6F3-D20F-4151-9BEA-F3BF930A9060"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "f23511db-6c3e-4e32-a477-6aa17d310630"}
