CVE-2026-122051: Edimax BR-6208AC mp command injection
A flaw has been found in Edimax BR-6208AC 1.32. Affected by this vulnerability is an unknown functionality of the file /goform/mp. Executing a manipulation can lead to command injection. The attack may be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Event History
Frequently Asked Questions
What systems are exposed to this issue?
Edimax BR-6208AC devices running version 1.32 are identified as affected. The vulnerable functionality is exposed through the /goform/mp path.
What does an attacker need to exploit it?
The issue can be exploited remotely, with no privileges or user interaction indicated in the supplied severity vector. An exploit has been published, increasing the likelihood of attempted exploitation.
Is there a vendor-provided fix or workaround available?
The available data does not identify a fix or workaround. The vendor was contacted before disclosure but did not respond.
How can I determine whether a device may be affected?
Identify Edimax BR-6208AC devices and verify whether they run firmware version 1.32. Devices exposing the /goform/mp functionality should be treated as potentially vulnerable.