CVE-2026-108933: Edimax BR-6208AC formFilter cross site scripting
A vulnerability was identified in Edimax BR-6208AC 1.32. Affected is an unknown function of the file /goform/formFilter. Such manipulation leads to cross site scripting. The attack can be executed remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The attack can be executed remotely, but the listed vector requires high privileges and user interaction. The provided data does not specify which privileged account or interaction is needed.
Is exploit code available?
Yes. The exploit is publicly available and might be used.
Which version is identified as affected?
The affected product version identified in the disclosure is Edimax BR-6208AC 1.32.
Has the vendor provided a response or remediation?
The vendor was contacted early about the disclosure but did not respond. No vendor fix or workaround is provided in the available data.