CVE-2026-107795
7.5HighPublished 14 Oct 2026 · NVD status: Deferred · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
- Impact
- Full C/I/A compromise
- Weakness
- CWE-284, CWE-862
Impact
Authenticated low-privileged users can overwrite or delete the controller's TLS certificate and private key over the network. This can cause denial of service or break secure management access.
Root cause
The MSP and OpenAPI certificate and private-key management endpoints fail to enforce administrative authorization checks.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v4.0 · CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Fix & remediation
Upgrade Omada Controller to the patched release referenced in advisory 136188, or restrict network access to the MSP and OpenAPI management ports to trusted administrative IPs until patched.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
Omada Controller's MSP and OpenAPI certificate/private-key management APIs do not properly enforce administrative authorization, allowing an authenticated user to perform privileged certificate management operations. Successful exploitation may allow a low-privileged authenticated user to upload or delete the controller's TLS certificate or private key, potentially disrupting secure management access.