Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.3
CVE-2026-108917: Edimax BR-6208AC can run attacker commands remotely
CVE-2026-108917 · published 6 days ago
Summary
The Edimax BR-6208AC router (firmware 1.32) mishandles a firmware‑upgrade request, allowing an attacker to send a crafted message that makes the device execute unauthorized commands. This can be done from anywhere on the network, giving the attacker control of the router. Because the product is no longer supported, the best actions are to stop using the device, isolate it from the network, or replace it with a supported model; apply any available firmware update if one exists.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| edimax | br-6208ac | 1.32 |
Original advisory text
Edimax BR-6208AC formAutoFWupgrade command injection
A vulnerability was determined in Edimax BR-6208AC 1.32. This issue affects some unknown processing of the file /goform/formAutoFWupgrade. Executing a manipulation of the argument tftpsIP can lead to command injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker full control
Type
CWE-74Injection
CWE-77Command Injection
Timeline
Published12 Oct 2026
Updated15 Oct 2026
First seen12 Oct 2026
Track software like this
Free during beta