CVE-2026-19586Suited to automated attack · CISA
Pre-Authentication OS Command Injection in Omada Gateways on OpenVPN Server in Omada Gateways
CVSS score
9.3
EPSS probability
%5.7
Risk score
0.5
Published
1 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
Proof of Concept (PoC) for the TP-Link Omada SSL VPN Unauthenticated RCE (CVE-2026-19586)
Makefile Go / Python
Similar Vulnerabilities
9.8
CVE-2021-41653Code injection in Tp Link Tl Wr840n
Patch status unknown Public Exploits:3EPSS %76
9.8
CVE-2022-25061OS command injection in Tp Link Tl Wr840n
Patch status unknown Public Exploits:3EPSS %59
9.8
CVE-2022-25060OS command injection in Tp Link Tl Wr840n
Patch status unknown Public Exploits:2EPSS %40
9.8
CVE-2022-25064OS command injection in Tp Link Tl Wr840n
Patch status unknown Public Exploits:3EPSS %36
8.8
CVE-2022-30075Vulnerability in Tp Link Archer Ax50 Firmware
Patch status unknown Public Exploits:7EPSS %35
6.5
CVE-2023-50224 Actively exploitedVulnerability in Tp Link Tl Wr841n
WorkaroundEPSS %20
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-19586"