Which versions of Sg2008P 3 2X are affected by CVE-2026-1668?

A high-severity vulnerability in Omada switch web interfaces allows unauthenticated attackers to execute arbitrary commands or cause denial-of-service through improper input validation.. A patch is available.

How to fix or mitigate CVE-2026-1668?

Within 24 hours: Identify all Omada switches in your environment and verify affected model/firmware versions against vendor advisories. Within 7 days: Apply the available vendor patch to all affected switches, prioritizing internet-facing or critical infrastructure units; consider staging updates in non-production environments first. Within 30 days: Conduct post-patch verification testing and review network access controls to ensure web interface exposure is restricted to authorized administrators only.

Sg2008P 3 2X CVE-2026-1668

Q: What is the CVSS score of CVE-2026-1668?

CVE-2026-1668 has a CVSS 4.0 base score of 7.7 (High). CVSS vector: CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

EUVD-2026-12049 HIGH

Improper Input Validation (CWE-20)

2026-03-13 TPLink

Buffer Overflow Information Disclosure RCE Sg2008P 3 2X Sg2008P 3 3X Sx3016F 1 3X Sx3016F 1 2X Sg3428 2 4X Sg3428Xmp 3 3X Sg3428X 1 4X Sg3428Xf 1 3X Sg3452P 3 4X Sg3428Mp 6 3X Sg2218P 2 2X Sg2016P 1 3X Sg3452Xp 2 3X Sg3428Xmpp 1 2X Sg3452X 1 3X Sg2008 4 3X Sg3210 3 3X Sg2210Mp 5 2X Sg2210P 5 3X Sg2218 1 3X Sg3452 1 3X Sg3210X M2 1 2X Sg2210Xmp M2 1 X Sg2008 4 2X Sg2218P 1 2X Sg3210 3 2X Sg3428X M2 1 2X Sx3832Mpp 1 X Sg2218 1 2X Sx3832 1 X Sg2428Lp 1 X Sl2428P 6 2X Sg3218Xp M2 1 X Sg3210Xhp M2 3 X Sg2218P 2 X Sg3210X M2 1 X Sg2428P 5 3X Sg2210Mp 4 2X Sg3452P 3 3X Sg3452 1 2X Sg2452Lp 1 X Sx3032F 1 X Sg3452X 1 2X Sg3452Xmpp 1 X Sg3428Xpp M2 1 2X Tl Sg3452P 3 0 Sg2428P 5 2X Sg2210Mp 5 X Sg2005P Pd 1 X Sg2016P 1 2X Sg3452Xp 2 2X Sg3428Xmp 3 2X Sg3428X 1 3X Sg3428Xf 1 2X Sg3428Mp 6 2X Tl Sg3428Mp 5 X Sg3428 2 3X Sg3428Xmpp 1 X Tl Sg2428P 4 X Sg2210P 5 2X Sx3008F 1 2X Sx3206Hpp 1 20

7.7

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.7 HIGH

CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Adjacent

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Patch released

Apr 02, 2026 - 15:03 nvd

Patch available

EUVD ID Assigned

Mar 13, 2026 - 16:57 euvd

EUVD-2026-12049

Analysis Generated

Mar 13, 2026 - 16:57 vuln.today

CVE Published

Mar 13, 2026 - 16:53 nvd

HIGH 7.7

DescriptionCVE.org

The web interface on multiple Omada switches does not adequately validate certain external inputs, which may lead to out-of-bound memory access when processing crafted requests. Under specific conditions, this flaw may result in unintended command execution.<br>An unauthenticated attacker with network access to the affected interface may cause memory corruption, service instability, or information disclosure. Successful exploitation may allow remote code execution or denial-of-service.

AnalysisAI

Unauthenticated attackers can trigger out-of-bounds memory access in the web interface of multiple Omada switches through improper input validation, potentially achieving remote code execution or causing denial-of-service. Affected products include Sg2005p PD 1.x, Sg2008 4.2x/4.3x, and Sg2008p 3.2x/3.3x, which require only network access to the vulnerable interface. A patch is available to address this high-severity vulnerability (CVSS 7.7).

Technical ContextAI

The vulnerability affects Omada switches' web management interface, where improper input validation (CWE-20) leads to out-of-bounds memory access during request processing. This classic web application security flaw occurs when external inputs are not properly sanitized before being used in memory operations, potentially allowing attackers to write beyond allocated buffer boundaries. The affected products appear to be TP-Link Omada series managed switches, though specific CPE identifiers and exact model numbers are not provided in the available data.

RemediationAI

Primary remediation requires applying vendor-supplied firmware updates once available, though no specific patch version or vendor advisory URL is currently referenced. As immediate mitigation, restrict network access to the web management interface using ACLs or firewall rules to allow only trusted administrative IP addresses. Consider disabling the web interface entirely if not required and use alternative management methods such as CLI over SSH where possible.