Critical Vulnerabilities Uncovered in Data Center Power Systems and TP‑Link Network Provisioning

Security researchers have identified serious flaws in two key components of modern data‑center infrastructure. In Vertiv uninterruptible power supplies (UPS) they found two critical weaknesses that could cause a total power loss, while a separate study revealed multiple exploitable bugs in Trane Tracer SC+ HVAC controllers that allow remote code execution and could let attackers manipulate temperature settings. Both issues threaten costly downtime, with potential losses of hundreds of thousands of euros per hour as AI workloads increase reliance on stable data‑center operations.

In a related discovery, Forescout Research uncovered 15 previously unknown vulnerabilities in TP‑Link Omada's Zero‑Touch Provisioning (ZTP) system. The flaws span device onboarding, authentication, credential handling and cryptographic trust relationships. When chained, they enable attackers to move from a single compromised device to full control of network controllers, cloud services and the broader managed infrastructure, exposing a critical attack surface for automated network deployments.