CVE-2026-108934: Edimax BR-6208AC HTTP Blocking formUrlb cross site scripting
A security flaw has been discovered in Edimax BR-6208AC 1.32. Affected by this vulnerability is an unknown functionality of the file /goform/formUrlb of the component HTTP Blocking Page. Performing a manipulation results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
The attack can be performed remotely, but the published severity vector indicates an attacker needs high privileges and user interaction. This suggests exposure is most relevant where an authenticated high-privilege user can be induced to interact with crafted content.
Is exploit code available?
Yes. The exploit has been released publicly and may be used in attacks.
Which versions are known to be affected?
The provided information identifies Edimax BR-6208AC version 1.32. No other affected or fixed versions are specified.
Is a vendor fix available?
The available information does not identify a fix. It states that the vendor was contacted before disclosure but did not respond.