CVE-2026-1668 Input Validation Vulnerability on Multiple Omada Switches
The web interface on multiple Omada switches does not adequately validate certain external inputs, which may lead to out-of-bound memory access when processing crafted requests.  Under specific conditions, this flaw may result in unintended command execution.<br>An unauthenticated attacker with network access to the affected interface may cause memory corruption, service instability, or information disclosure.  Successful exploitation may allow remote code execution or denial-of-service.
Problem types: cwe_id: CWE-20
description: CWE-20 Improper Input Validation
Affected products: vendor: TP-Link Systems Inc.
product: SG2008P 3.2x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG2008P 3.3x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SX3016F 1.3x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SX3016F 1.2x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG3428 2.4x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG3428XMP 3.3x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG3428X 1.4x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG3428XF 1.3x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG3452P 3.4x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG3428MP 6.3x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG2218P 2.2x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG2016P 1.3x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG3452XP 2.3x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG3428XMPP 1.2x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG3452X 1.3x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG2008 4.3x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG3210 3.3x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG2210MP 5.2x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG2210P 5.3x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG2218 1.3x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG3452 1.3x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG3210X-M2 1.2x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG2210XMP-M2 1.x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG2008 4.2x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG2218P 1.2x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG3210 3.2x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG3428X-M2 1.2x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SX3832MPP 1.x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG2218 1.2x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SX3832 1.x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG2428LP 1.x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SL2428P 6.2x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG3218XP-M2 1.x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG3210XHP-M2 3.x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG2218P 2.x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG3210X-M2 1.x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG2428P 5.3x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG2210MP 4.2x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG3452P 3.3x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG3452 1.2x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG2452LP 1.x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SX3032F 1.x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG3452X 1.2x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG3452XMPP 1.x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG3428XPP-M2 1.2x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: TL-SG3452P 3.0
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG2428P 5.2x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG2210MP 5.x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG2005P-PD 1.x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG2016P 1.2x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG3452XP 2.2x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG3428XMP 3.2x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG3428X 1.3x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG3428XF 1.2x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG3428MP 6.2x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: TL-SG3428MP 5.x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG3428 2.3x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG3428XMPP 1.x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: TL-SG2428P 4.x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SG2210P 5.2x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SX3008F 1.2x
default_status: unaffected
vendor: TP-Link Systems Inc.
product: SX3206HPP 1.20
default_status: unaffected
Credits: lang: en
value: tangrs
Published: 2026-03-13T16:53:23.486Z