CVE-2026-108916 | Edimax BR-6208AC 1.32 /goform/formAccept submit-url command injection

October 11, 2026 Yanac

A vulnerability has been found in Edimax BR-6208AC 1.32 and classified as critical. This vulnerability affects unknown code of the file /goform/formAccept. Performing a manipulation of the argument submit-url results in command injection. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is reported as CVE-2026-108916. The attack is possible to be carried out remotely. Moreover, an exploit is present.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More