CVE-2018-10168

HIGH · CVSS 8.8 EPSS 1.55%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-05-03 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2018-10168

Severity

HIGH

CVSS

8.8

EPSS

1.55%

Windows

Original Filing — NVD Description

TP-Link EAP Controller and Omada Controller versions 2.5.4_Windows/2.6.0_Windows do not control privileges for usage of the Web API, allowing a low-privilege user to make any request as an Administrator. This is fixed in version 2.6.1_Windows.