CVE-2026-1668CWE-20

Input Validation Vulnerability on Multiple Omada Switches

High · published March 13, 2026

CVSS v4.0
7.7
EPSS
1%
Percentile
63.0
In the wild
Unconfirmed
What it is

The web interface on multiple Omada switches does not adequately validate certain external inputs, which may lead to out-of-bound memory access when processing crafted requests. Under specific conditions, this flaw may result in unintended command execution.<br>An unauthenticated attacker with network access to the affected interface may cause memory corruption, service instability, or information disclosure. Successful exploitation may allow remote code execution or denial-of-service.

The record
Technical detail
CVSS v4.0
7.7 · HIGH
Vector
CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.01017 · 63.0th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2026-03-13T16:53Z
EPSS history
Timeline
  • 13 MAR 16:53Z
    Input Validation Vulnerability on Multiple Omada Switches
    cvelistv5