CVE-2026-32841: Edimax GS-5008PL <= 1.00.54 Global Authentication State Across All Clients
Edimax GS-5008PL firmware versions 1.00.54 and prior contain an authentication bypass vulnerability that allows unauthenticated attackers to access the management interface. Attackers can exploit the global authentication flag mechanism to gain administrative access without credentials after any user authenticates, enabling unauthorized password changes, firmware uploads, and configuration modifications.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Edimax GS-5008PLto a version that resolves this vulnerability.Fixed in 1.00.54
Event History
Frequently Asked Questions
What is the severity of CVE-2026-32841?
CVE-2026-32841 is considered a high severity vulnerability due to its ability to allow unauthenticated access to the management interface.
How do I fix CVE-2026-32841?
To fix CVE-2026-32841, upgrade the Edimax GS-5008PL firmware to a version later than 1.00.54.
Who is affected by CVE-2026-32841?
CVE-2026-32841 affects users of the Edimax GS-5008PL running firmware version 1.00.54 or earlier.
What type of vulnerability is CVE-2026-32841?
CVE-2026-32841 is classified as an authentication bypass vulnerability.
What can attackers do with CVE-2026-32841?
Attackers can exploit CVE-2026-32841 to gain unauthorized access to the management interface of the affected device.