Edimax Br-6208ac vulnerabilities

11 CVEs affecting Edimax Br-6208ac, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-108936, published 2026-10-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-7682, published 2026-05-03. Medium severity, CVSS 6.3. EPSS: 2.4% chance of exploitation in the next 30 days. A security flaw has been discovered in Edimax BR-6208AC 1.02. The impacted element is the function setWAN of the file /goform/setWAN of the component L2TP Mode. The manipulation of the argument…
CVE-2026-108918, published 2026-10-12. Critical severity, CVSS 10.0. EPSS: 2% chance of exploitation in the next 30 days. A vulnerability was identified in Edimax BR-6208AC 1.32. Impacted is an unknown function of the file /goform/formWlanMP. The manipulation of the argument readE2P leads to command injection. It is…
CVE-2026-108917, published 2026-10-12. Critical severity, CVSS 10.0. EPSS: 2% chance of exploitation in the next 30 days. A vulnerability was determined in Edimax BR-6208AC 1.32. This issue affects some unknown processing of the file /goform/formAutoFWupgrade. Executing a manipulation of the argument tftpsIP can lead to…
CVE-2026-108916, published 2026-10-12. High severity, CVSS 8.3. EPSS: 1.7% chance of exploitation in the next 30 days. A vulnerability was found in Edimax BR-6208AC 1.32. This vulnerability affects unknown code of the file /goform/formAccept. Performing a manipulation of the argument submit-url results in command…
CVE-2026-7685, published 2026-05-03. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability was detected in Edimax BR-6208AC up to 1.02. Affected is an unknown function of the file /goform/setWAN. Performing a manipulation of the argument pptpDfGateway results in buffer…
CVE-2026-108914, published 2026-10-12. Critical severity, CVSS 9.9. EPSS: 0.6% chance of exploitation in the next 30 days. A flaw has been found in Edimax BR-6208AC 1.32. Affected by this issue is some unknown functionality of the file /goform/formWlSiteSurvey. This manipulation of the argument ifname causes buffer…
CVE-2026-108915, published 2026-10-12. Critical severity, CVSS 9.9. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability has been found in Edimax BR-6208AC 1.32. This affects an unknown part of the file /goform/formWlanMP. Such manipulation of the argument ateBW leads to buffer overflow. The attack can…
CVE-2026-108935, published 2026-10-12. Low severity, CVSS 2.4. EPSS: 0.3% chance of exploitation in the next 30 days. A weakness has been identified in Edimax BR-6208AC 1.32. Affected by this issue is some unknown functionality of the file /goform/formPortFw of the component Port Forwarding Page. Executing a…
CVE-2026-108936, published 2026-10-12. Low severity, CVSS 2.4. EPSS: 0.2% chance of exploitation in the next 30 days. A security vulnerability has been detected in Edimax BR-6208AC 1.32. This affects an unknown part of the file /goform/formQoS of the component QoS Page. The manipulation leads to cross site…
CVE-2026-108934, published 2026-10-12. Low severity, CVSS 2.4. EPSS: 0.2% chance of exploitation in the next 30 days. A security flaw has been discovered in Edimax BR-6208AC 1.32. Affected by this vulnerability is an unknown functionality of the file /goform/formUrlb of the component HTTP Blocking Page. Performing a…

Latest

CVE-2026-108933, published 2026-10-12. Low severity, CVSS 2.4. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability was identified in Edimax BR-6208AC 1.32. Affected is an unknown function of the file /goform/formFilter. Such manipulation leads to cross site scripting. The attack can be executed…