A vulnerability has been found in Edimax BR-6208AC 1.32. (CVE-2026-108915)

CVE-2026-108915 describes a buffer overflow vulnerability in Edimax BR-6208AC version 1.32. The flaw is triggered by remote manipulation of the ateBW argument in the /goform/formWlanMP file, allowing an attacker to overflow a buffer. The vulnerability has a CVSS 3.1 score of 9.9, indicating critical impact on confidentiality, integrity, and availability. The vendor was contacted but did not respond, and the product is no longer supported. Public exploit information has been disclosed, though no known exploits in the wild have been reported.

Successful exploitation can lead to complete compromise of the affected device, including full control over confidentiality, integrity, and availability. Because the attack can be executed remotely, it poses a significant risk to network security. The lack of vendor support means no official patches or fixes are available, increasing exposure.

No official patch or fix is available as the product is no longer supported and the vendor has not responded to disclosure. Users should consider discontinuing use of the affected device or isolating it from critical networks to mitigate risk. Monitor for any third-party mitigations or community-developed workarounds, but no vendor-endorsed remediation exists.