CVE-2026-19683 Unencrypted Credential Transmission in Omada Gateway Dynamic DNS Authentication in Omada Gateways
Attackers can intercept unencrypted DDNS credentials on TP-Link Omada Gateways, leading to credential theft and unauthorized DNS record modification.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-19683?
CVE-2026-19683 is a medium-severity vulnerability in TP-Link Systems Inc DR3150 v1, published on 20 Aug 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability exists in the Dynamic DNS (DDNS) functionality of TP-Link Omada Gateways. During communication with a third-party DDNS service, authentication credentials are transmitted over an unencrypted channel. An attacker who can observe or manipulate traffic between an affected device and the DDNS service may obtain sensitive authentication information or interfere with DDNS update operations. Exploitation requires DDNS to be configured, communication with an external DDNS service, and attacker visibility or control of the relevant network path.
Successful exploitation may result in disclosure of DDNS account credentials, unauthorized access to DDNS management functionality, or modification of DNS records associated with the affected deployment.
Weakness: CWE-319
Which versions are affected by CVE-2026-19683?
It affects 18 products.
Products include Tp-Link Dr3150 Firmware, Tp-Link Dr3220v-4g Firmware, Tp-Link Dr3650v-4g Firmware, Tp-Link Dr3650v Firmware, Tp-Link Er603wp-4g-Outdoor Firmware, Tp-Link Er605 Firmware and 12 more.
How do I fix CVE-2026-19683?
No fix has been published for CVE-2026-19683 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-19683 being exploited?
There is no known exploitation of CVE-2026-19683 in the wild and no public exploit code.
Other vulnerabilities in TP-Link Systems Inc DR3150 v1
Sources
Also known as GHSA-hgmf-v69c-5gmf.