15 TP-Link Omada ZTP Flaws Enable Router Hijacking and Root Code Execution

A set of 15 vulnerabilities in TP-Link’s Omada Zero-Touch Provisioning (ZTP) could enable attacks against enterprise networks, with the findings set to be presented at Black Hat USA 2026. TP-Link Omada is widely used to manage routers, switches, gateways, and wireless access points from a central controller. ZTP helps administrators deploy large numbers of devices quickly. When a new device connects, it finds the controller and receives configuration details, credentials, and firmware updates without manual setup. This convenience creates a high-value target. If attackers can compromise the trust relationship between a controller and its managed devices, they may gain access to an entire fleet rather than a single...

Read the full article at the source.