CVE-2026-116227: Edimax BR-6208AC Virtual Server cross site scripting
A vulnerability has been found in Edimax BR-6208AC 1.32. This vulnerability affects unknown code of the component Virtual Server Page. The manipulation leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The CVSS vector indicates that the attacker needs high privileges and that user interaction is required. Exploitation can be performed remotely once those conditions are met.
Is exploitation likely to be available to attackers?
Yes. A public exploit has been disclosed, so attackers may be able to use it.
Which deployments are known to be affected?
The affected product version identified in the available data is Edimax BR-6208AC 1.32. The issue is associated with the Virtual Server Page.
Is a vendor fix or response available?
No vendor response is reported in the available data. The vendor was contacted before disclosure but did not respond.