Edimax Br-6288acl Firmware vulnerabilities

3 CVEs affecting Edimax Br-6288acl Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-1971, published 2026-02-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-33722, published 2023-05-31. High severity, CVSS 8.8. EPSS: 1.7% chance of exploitation in the next 30 days. EDIMAX BR-6288ACL v1.12 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the pppUserName parameter.
CVE-2025-1612, published 2025-02-24. Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was found in Edimax BR-6288ACL 1.30. It has been declared as problematic. This vulnerability affects unknown code of the file wireless5g_basic.asp. The manipulation of the argument…
CVE-2026-1971, published 2026-02-06. Medium severity, CVSS 4.8. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability has been found in Edimax BR-6288ACL up to 1.12. Impacted is the function wiz_WISP24gmanual of the file wiz_WISP24gmanual.asp. Such manipulation of the argument manualssid leads to…