CVE-2026-108914: Edimax BR-6208AC formWlSiteSurvey buffer overflow
A flaw has been found in Edimax BR-6208AC 1.32. Affected by this issue is some unknown functionality of the file /goform/formWlSiteSurvey. This manipulation of the argument ifname causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Deployments of the Edimax BR-6208AC running version 1.32 are affected. The issue applies only to products that are no longer supported by the maintainer.
What does an attacker need to exploit it?
Exploitation can be performed remotely by manipulating the ifname argument submitted to /goform/formWlSiteSurvey. The severity vector indicates that an attacker needs low-level privileges, while no user interaction is required.
Is public exploit code available?
Yes. An exploit has been published and may be used.
What should teams do if the device cannot be patched?
Because the affected product is no longer supported and the vendor did not respond to the disclosure, prioritize removing or replacing affected devices. Until replacement, restrict remote access to the device management interface and limit access to trusted administrative users.