CVE-2026-9033

Published: Aug 20, 2026Modified: Sep 8, 2026

6.0

Vector

CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: f23511db-6c3e-4e32-a477-6aa17d310630 (Secondary)

Description

An unauthenticated attacker with network access to the captive portal service of an affected device can terminate active captive portal sessions, including forcing logout of specific users or clearing all active sessions. Affected users must re-authenticate to regain access. Successful exploitation may allow termination of individual or all active captive portal sessions, causing temporary service disruption and requiring users to re-authenticate.

Affected (19)

Products: Tp Link: Er7212pc Firmware, Er605 Firmware, Er7206 Firmware, Er7406 Firmware, Er707 M2 Firmware, Er7412 M2 Firmware, Er8411 Firmware, Er706w Firmware, Er706w 4g Firmware, Er706wp 4g Firmware, Er703wp 4g Outdoor Firmware, Dr3220v 4g Firmware, Dr3650v Firmware, Dr3650v 4g Firmware, Er603wp 4g Outdoor Firmware, Dr3150 Firmware, Er701 5g Outdoor Firmware, Er605w Firmware

18 products

Er703wp 4g Outdoor Firmware

Dr3220v 4g Firmware

Dr3650v Firmware

Dr3650v 4g Firmware

Er603wp 4g Outdoor Firmware

Dr3150 Firmware

Er701 5g Outdoor Firmware

Er605w Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Er7212pc Firmware	Before 2.4.3

Running on/with	Platform Versions
Tp Link Er7212pc	Version 2.0

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Er605 Firmware	Before 2.4.4

Running on/with	Platform Versions
Tp Link Er605	Version 2.0

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Er7206 Firmware	Before 2.3.5

Running on/with	Platform Versions
Tp Link Er7206	Version 2.0

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Er7406 Firmware	Before 1.3.4

Running on/with	Platform Versions
Tp Link Er7406	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Er707 M2 Firmware	Before 1.4.4

Running on/with	Platform Versions
Tp Link Er707 M2	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Er7412 M2 Firmware	Before 1.2.0

Running on/with	Platform Versions
Tp Link Er7412 M2	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Er8411 Firmware	Before 1.4.1

Running on/with	Platform Versions
Tp Link Er8411	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Er706w Firmware	Before 1.2.11

Running on/with	Platform Versions
Tp Link Er706w	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Er706w 4g Firmware	Before 1.2.6

Running on/with	Platform Versions
Tp Link Er706w 4g	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Er706w 4g Firmware	Before 2.1.11

Running on/with	Platform Versions
Tp Link Er706w 4g	Version 2.0

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Er706wp 4g Firmware	Before 1.1.11

Running on/with	Platform Versions
Tp Link Er706wp 4g	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Er703wp 4g Outdoor Firmware	Before 1.1.7

Running on/with	Platform Versions
Tp Link Er703wp 4g Outdoor	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Dr3220v 4g Firmware	Before 1.2.0

Running on/with	Platform Versions
Tp Link Dr3220v 4g	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Dr3650v Firmware	Before 1.2.0

Running on/with	Platform Versions
Tp Link Dr3650v	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Dr3650v 4g Firmware	Before 1.2.0

Running on/with	Platform Versions
Tp Link Dr3650v 4g	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Er603wp 4g Outdoor Firmware	Before 1.0.2

Running on/with	Platform Versions
Tp Link Er603wp 4g Outdoor	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Dr3150 Firmware	Before 1.0.1

Running on/with	Platform Versions
Tp Link Dr3150	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Er701 5g Outdoor Firmware	Before 1.0.3

Running on/with	Platform Versions
Tp Link Er701 5g Outdoor	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tp Link Er605w Firmware	Before 2.0.4

Running on/with	Platform Versions
Tp Link Er605w	Version 2.0

Related CWEs

CWE-306

Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

References (3)

https://www.omadanetworks.com/en/support/download/

Source: f23511db-6c3e-4e32-a477-6aa17d310630

Product

https://www.omadanetworks.com/us/support/download/

Source: f23511db-6c3e-4e32-a477-6aa17d310630

Product

https://www.tp-link.com/us/support/faq/5256/

Source: f23511db-6c3e-4e32-a477-6aa17d310630

Vendor Advisory

Timeline

No history available yet.