A flaw has been found in Edimax BR-6208AC 1.32. (CVE-2026-108914)

CVE-2026-108914 describes a buffer overflow vulnerability in the Edimax BR-6208AC router firmware version 1.32. The issue arises from improper handling of the 'ifname' argument in the /goform/formWlSiteSurvey endpoint, enabling remote attackers with low privileges to trigger a buffer overflow. This can lead to complete compromise of confidentiality, integrity, and availability. The vendor was notified but did not respond or provide a fix. The exploit code is publicly available. The product is no longer maintained by the vendor.

Successful exploitation allows remote attackers to execute arbitrary code with elevated privileges, potentially leading to full system compromise, data theft, or denial of service. The vulnerability affects confidentiality, integrity, and availability with a CVSS 3.1 score of 9.9 (critical severity).

No official patch or remediation is available as the affected product is no longer supported by the vendor. Users should consider discontinuing use of the Edimax BR-6208AC 1.32 device or isolate it from untrusted networks to mitigate risk. Monitor for exploit attempts given the public availability of exploit code.