GHSA-8qr5-rrw5-mq36Medium
An information disclosure vulnerability in the SAML Single Sign-On (SSO) functionality of Omada...
🔗 CVE IDs covered (1)
📋 Description
An information disclosure vulnerability in the SAML Single Sign-On (SSO) functionality of Omada Controller allows an authenticated user with SAML configuration privileges to access sensitive information due to insufficient validation of user-supplied SAML metadata. Successful exploitation could result in unauthorized disclosure of sensitive information.
🔗 References (7)
- https://nvd.nist.gov/vuln/detail/CVE-2026-84941
- https://support.omadanetworks.com/en/document/133722
- https://support.omadanetworks.com/en/download/software/omada-controller
- https://support.omadanetworks.com/us/download/software/omada-controller
- https://www.omadanetworks.com/en/support/download
- https://www.omadanetworks.com/us/support/download
- https://github.com/advisories/GHSA-8qr5-rrw5-mq36