A collection of 15 vulnerabilities in TP-Link’s Omada Zero-Touch Provisioning (ZTP) could allow for attacks on enterprise networks, according to findings set to be presented at Black Hat USA 2026 This article explores vulnerabilities tp link. . Omada is commonly used by administrators to manage routers, switches, gateways, and wireless access points from a central controller.
ZTP simplifies the deployment of numerous devices quickly by allowing new connections to find and receive configuration details, credentials, and firmware updates without manual setup. Some issues may also impact TP-Link IP cameras, smart-home products, cloud accounts, and multiple Android applications, including Tapo, Kasa, Deco, Tether, and Omada Guard.
Forescout researchers also discovered a cloud adoption race condition, tracked as CVE-2025-15630, that could allow attackers to spoof a device's MAC address during registration and steal configuration data, including administrator credentials, site credentials, and VPN keys. This vulnerability allows attackers to inject malicious JavaScript into an administrator session, potentially stealing credentials through fake login prompts or extracting controller data. An attacker can identify unadopted devices, impersonate one during provisioning, obtain sensitive controller information, compromise an administrator account, and then use the controller to modify network settings or target managed routers.
Network defenders should also limit local man-in-the-middle risks through 802.1X, network access control, port security, Dynamic ARP Inspection, wireless client isolation, and segmentation.
