Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.6

Edimax BR-6208AC remote buffer overflow risk

CVE-2026-108915 · published 6 days ago
Summary

The Edimax BR-6208AC router can be tricked into overflowing memory when it processes a specially crafted request to its formWlanMP page. An attacker on the network could cause the device to crash or potentially take control of it. Because the product is no longer supported, the safest steps are to replace the router, limit its exposure to untrusted networks, and consider segmenting it from critical systems.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
edimax br-6208ac 1.32
Original advisory text
Edimax BR-6208AC formWlanMP buffer overflow
A vulnerability has been found in Edimax BR-6208AC 1.32. This affects an unknown part of the file /goform/formWlanMP. Such manipulation of the argument ateBW leads to buffer overflow. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
8.6 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-119Buffer Overflow
CWE-120Classic Buffer Overflow
Timeline
Published12 Oct 2026
Updated15 Oct 2026
First seen12 Oct 2026
Sources
CVE-2026-108915 · NVD
CVE-2026-108915 · MITRE
Track software like this
Free during beta