VULNERABILITY INTELLIGENCE
CVE-2026-81531
EPSS probability0.67%
CISA KEVNot currently listed
Published2026-09-08
Last modified2026-09-21
Description
An information disclosure vulnerability has been identified in Omada Controller. An API endpoint intended for Controller initialization remains accessible after completion and may disclose account-related information to unauthenticated remote users. Successful exploitation may allow an attacker to remote query the affected endpoint that may facilitate user enumeration and subsequent attacks targeting administrative accounts.
Weakness classification
- f23511db-6c3e-4e32-a477-6aa17d310630: CWE-200