CVE-2026-1972: Edimax BR-6208AC auth_check_userpass2 default credentials
A vulnerability was found in Edimax BR-6208AC 21.02. The affected element is the function authcheckuserpass2. Performing a manipulation of the argument Username/Password results in use of default credentials. The attack may be initiated remotely. The exploit has been made public and could be used. The vendor confirms that the affected product is end-of-life. They confirm that they "will issue a consolidated Security Advisory on our official support website." This vulnerability only affects products that are no longer supported by the maintainer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-1972?
CVE-2026-1972 has been classified as a high-severity vulnerability due to the exposure of default credentials.
How do I fix CVE-2026-1972?
To mitigate CVE-2026-1972, change the default username and password immediately after installation of the Edimax BR-6208AC.
Who is affected by CVE-2026-1972?
CVE-2026-1972 affects users of the Edimax BR-6208AC router with version 2_1.02.
What is the attack vector for CVE-2026-1972?
An attacker can exploit CVE-2026-1972 by manipulating the authentication inputs to log in using default credentials.
What does CVE-2026-1972 imply for network security?
CVE-2026-1972 poses a significant risk to network security as it allows unauthorized access if default credentials are not changed.