Forescout Uncovers Critical Flaws in TP-Link Zero-Touch Provisioning — Forescout Technologies Inc.

Event summary

Forescout Research – Vedere Labs identified 15 previously unknown vulnerabilities in TP-Link Omada’s Zero-Touch Provisioning (ZTP) system.
The flaws can be chained to compromise controllers, cloud services, and managed devices, potentially infiltrating enterprise networks.
Affected products include TP-Link Omada, Omada Guard, VIGI, Festa, Tapo, and Kasa ecosystems, with over 70 million mobile app downloads.
Forescout will present the findings at Black Hat USA on August 5, 2026.

The big picture

Forescout’s research highlights a critical shift in the threat landscape, where attackers are increasingly targeting the automation systems that manage network devices. As Zero-Touch Provisioning becomes more widespread, vulnerabilities in these systems could provide broad access to enterprise networks, making them a prime target for cybercriminals. The findings underscore the need for continuous visibility and verification of device-management workflows.

What we're watching

Network Security Risks: How the growing adoption of ZTP will force enterprises to reassess their network security strategies.
Vendor Responsiveness: Whether TP-Link and other vendors can quickly address these vulnerabilities before they are exploited at scale.
Regulatory Scrutiny: The pace at which regulators may impose stricter cybersecurity standards on IoT and network infrastructure providers.