CVE-2026-84941 | CVSS: N/A
An information disclosure vulnerability in the SAML Single Sign-On (SSO) functionality of Omada Controller allows an authenticated user with SAML configuration privileges to access sensitive information due to insufficient validation of user-supplied SAML metadata. Successful exploitation could result in unauthorized disclosure of sensitive information.
参考链接:
• https://support.omadanetworks.com/en/document/133722/
• https://support.omadanetworks.com/en/download/software/omada-controller
• https://support.omadanetworks.com/us/download/software/omada-controller
📌 数据来源: NVD 官方
⚠️ 合规声明: 本文内容仅用于网络安全合规学习、科研与授权测试用途。严禁用于任何未授权行为,违者自行承担全部法律责任。