TP-Link warns of critical command injection flaw in Omada gateways

Published on October 21, 2025

TP-Link has made firmware updates available for a broad range of Omada gateway models to address four vulnerabilities, among which a critical pre-auth OS command injection. [...]

Continue reading on website
Other news

CISA confirms hackers exploited Oracle E-Business Suite SSRF flaw

October 21, 2025
CISA has confirmed that an Oracle E-Business Suite flaw tracked as CVE-2025-61884 is being exploited in attacks, adding it to its Known Exploited Vulnerabilities catalog. [...]

Vidar Stealer 2.0 adds multi-threaded data theft, better evasion

October 21, 2025
The operators of Vidar Stealer, one of the most successful malware-as-a-service (MaaS) operations of the past decade, have released a new major version to reflect massive improvements in the malware. [...]