- This router model was used to break into US military and government networks - This router model was specifically weaponized to infiltrate US military and government networks. The same firmware architecture runs on devices in people's homes.
- A US ban could cut off firmware updates with little warning, leaving this router permanently exposed - A US government ban or forced sale could cut off firmware updates with little warning. Once that happens, this router is permanently unprotected.
- Your home network is more exposed than it should be - Your home network is more exposed than it should be. Your work laptop, banking sessions, security cameras, and smart home devices all pass through this router - a flaw here gives an attacker leverage over all of them at once.
- TP-Link is legally required to share your network data with the Chinese government if asked - The manufacturer is legally required to share your network data with the Chinese government if asked. This isn't theoretical - it's a legal obligation that can't be refused.
This router has documented security problems. Every device on this network - your work laptop, banking app, Ring camera, smart lock - is running at higher risk than it should be.
An F is not a warning - it’s a finding that the router has been independently flagged for security or supply-chain concerns serious enough to warrant action.
-
This router model was used to break into US military and government networks
This router model was specifically weaponized to infiltrate US military and government networks. The same firmware architecture runs on devices in people's homes.
Show technical detail
Volt Typhoon - TP-Link infrastructure: Chinese state hackers used TP-Link equipment as attack infrastructure targeting US government and military networks. The Omada business line shares TP-Link's corporate ownership and legal jurisdiction.
-
A US ban could cut off firmware updates with little warning, leaving this router permanently exposed
A US government ban or forced sale could cut off firmware updates with little warning. Once that happens, this router is permanently unprotected.
Show technical detail
Active federal investigation - full corporate family: The DOJ and FCC investigations cover TP-Link's full corporate structure, including business lines. A forced sale or ban would affect Omada continuity and support.
-
Your home network is more exposed than it should be
Your home network is more exposed than it should be. Your work laptop, banking sessions, security cameras, and smart home devices all pass through this router - a flaw here gives an attacker leverage over all of them at once.
Show technical detail
FCC DA 26-278 - new models blocked: FCC has blocked new TP-Link models from authorization. This affects long-term viability of Omada deployments.
-
TP-Link is legally required to share your network data with the Chinese government if asked
The manufacturer is legally required to share your network data with the Chinese government if asked. This isn't theoretical - it's a legal obligation that can't be refused.
Show technical detail
Chinese National Intelligence Law - business deployments: Chinese law requires TP-Link to cooperate with intelligence requests. For business and DIB-adjacent deployments, this is a direct compliance and counterintelligence risk.
An A-rated alternative is shown below.
We'll email you if a new vulnerability hits your TP-Link Omada. One email per incident. No spam.
- CISA Advisory AA23-144A · 2023 ↗
- FCC Equipment Authorization Database ↗
- FCC Covered List · National Security Designation ↗