CVE-2026-1971: Edimax BR-6288ACL wiz_WISP24gmanual.asp wiz_WISP24gmanual cross site scripting
A vulnerability has been found in Edimax BR-6288ACL up to 1.12. Impacted is the function wizWISP24gmanual of the file wizWISP24gmanual.asp. Such manipulation of the argument manualssid leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor confirms that the affected product is end-of-life. They confirm that they "will issue a consolidated Security Advisory on our official support website." This vulnerability only affects products that are no longer supported by the maintainer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-1971?
CVE-2026-1971 is classified as a cross-site scripting (XSS) vulnerability that can lead to unauthorized access to sensitive information.
How do I fix CVE-2026-1971?
To fix CVE-2026-1971, upgrade the Edimax BR-6288ACL firmware to a version higher than 1.12 that addresses this vulnerability.
Who is affected by CVE-2026-1971?
The vulnerability CVE-2026-1971 affects all versions of the Edimax BR-6288ACL router up to and including version 1.12.
What type of attack can be performed using CVE-2026-1971?
CVE-2026-1971 allows attackers to perform cross-site scripting attacks, potentially compromising user sessions and stealing information.
Is CVE-2026-1971 a critical vulnerability?
CVE-2026-1971 is considered a critical vulnerability due to its potential impact on user data and security.