Low 2.4

A vulnerability has been found in Edimax BR-6208AC 1.32. This vulnerability affects unknown code...

CVE-2026-116227 First seen on SecPulse Oct 26, 15:45

Original description The description as published by the source.

A vulnerability has been found in Edimax BR-6208AC 1.32. This vulnerability affects unknown code of the component Virtual Server Page. The manipulation leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory

References

Key facts

CVSS v3: Low 2.4; CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
CVSS v4: Low 1.9; CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
Published: Oct 26, 2026
First seen on SecPulse: Oct 26, 15:45
GHSA: GHSA-pqpm-5j87-2qmf
CWE: CWE-79 CWE-94

NVD GitHub Advisory

Tags(click for explanation)

Attack Types

Cross-Site Scripting

CWE

CWE-79 CWE-94

Vendors

Edimax

All

Br 6208Ac

Detection sources

NIST National Vulnerability DatabaseOct 31, 10:17
GitHub Security Advisories (Global)Oct 26, 18:31
CVE.org (CVE Program・cvelistV5)Oct 31, 10:05