CVE-2026-84941

Impact

An information disclosure vulnerability in the SAML Single Sign-On (SSO) functionality of Omada Controller allows an authenticated user with SAML configuration privileges to access sensitive information due to insufficient validation of user-supplied SAML metadata. Successful exploitation could result in unauthorized disclosure of sensitive information.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

Weakness classification

References

• NVD record
• CVE.org record
• https://support.omadanetworks.com/en/document/133722/
• https://support.omadanetworks.com/en/download/software/omada-controller
• https://support.omadanetworks.com/us/download/software/omada-controller
• https://www.omadanetworks.com/en/support/download/
• https://www.omadanetworks.com/us/support/download/