Loading vulnerability details…
CVSS v3.1
6.8
CVSS v4.0
8.3
EPSS
0.39%
Published
Jan 26, 2026
Modified
Mar 11, 2026
Public PoC / Exploit
All weaponized →No public PoC or exploit code indexed for this CVE.
Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
An IDOR vulnerability exists in Omada Controllers that allows an attacker with Administrator permissions to manipulate requests and potentially hijack the Owner account.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:HWeaknesses (CWE)
Affected Products (1)
References (2)