{"vulnerability": "cve-2026-84941", "sightings": [{"uuid": "0ba442a5-3efc-4895-b5e9-f5c771a032ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84941", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mv7bbib3be2b", "content": "CVE-2026-84941: TP-Link Systems disclosed an XML external entity flaw in the Omada Software Controller SAML single sign-on feature, letting an authenticated user with SAML configuration rights read sensitive information. Fixed in version 6.2.14.11.", "creation_timestamp": "2026-09-11T00:03:03.772896Z"}, {"uuid": "3f888075-a601-426d-a104-32c397fbaab8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84941", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mv7c3dsxxp25", "content": "TP-Link's Omada Controller, the console many businesses use to run their networks, has a patched flaw (CVE-2026-84941).\n\nA logged-in admin who manages SAML sign-on can read files off the controller host.\n\nSelf-hosted? Update to 6.2.14.11 or the July 11 build.", "creation_timestamp": "2026-09-11T00:17:32.608965Z"}]}