TP-Link Omada ZTP Vulnerabilities Chain Into Full Network Takeover

Forescout researchers have found 15 new vulnerabilities in the TP-Link Omada networking ecosystem. The post TP-Link Omada ZTP Vulnerabilities Chain Into Full Network Takeover appeared first on SecurityWeek .

According to Forescout’s research, TP-Link Omada’s zero-touch provisioning (ZTP) ecosystem contains 15 vulnerabilities, including hardcoded cryptographic material, insecure credential transmission, weak certificate validation, race conditions in cloud adoption, and XSS in controller interfaces, which can be chained to compromise fleets of managed devices and achieve full network takeover.[1][7][12] TP-Link has published advisories and firmware updates covering multiple CVEs across Omada controllers, gateways, and mobile apps, and recommends urgent patching, MFA, and credential/certificate rotation.[2][3][8] From a RealGround perspective, these flaws demonstrate how unmanaged networking components in an AI stack (routers, controllers, ZTP infrastructure) can be leveraged to intercept AI traffic, tamper with model inputs/outputs, or pivot into AI management interfaces, making network-layer SBOM, dependency mapping, and patch governance critical parts of AI supply chain security. Organizations deploying AI agents over Omada-backed networks should treat controller and gateway firmware as high-value supply chain assets and subject them to continuous red teaming and formal advisory track