CVE-2026-108916: Command Injection in Edimax BR-6208AC
Description
CVE-2026-108916 is a command injection vulnerability in the Edimax BR-6208AC router version 1.32. The flaw exists in the /goform/formAccept endpoint where manipulation of the submit-url argument allows remote attackers to execute arbitrary commands. The vulnerability affects an unsupported product version and has a medium severity rating with a CVSS score of 6.9. No vendor response or patch is available, and public exploit code exists but no known in-the-wild exploitation has been reported.
CVSS v4.0
Score 6.9medium
Affected software
Edimax
BR-6208AC
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability in Edimax BR-6208AC version 1.32 allows remote command injection via the submit-url parameter in the /goform/formAccept endpoint. The issue enables attackers to execute arbitrary commands on the device without authentication. The vendor was notified but did not respond, and the product is no longer supported. Public exploit code is available, increasing the risk of exploitation despite no confirmed active attacks.
Potential Impact
Successful exploitation could allow remote attackers to execute arbitrary commands on the affected device, potentially leading to full device compromise. Since the product is no longer supported, no official fixes or mitigations are provided by the vendor, increasing the risk for users still operating this version.
Mitigation Recommendations
No official patch or fix is available as the product is no longer supported and the vendor has not responded. Users are advised to discontinue use of the affected device or isolate it from untrusted networks to reduce exposure. Monitor for any updates from the vendor or community for potential unofficial mitigations.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-10-11T15:51:36.800Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6acd1d942cdf04f656bab201
Added to database: 10/12/2026, 17:49:08 UTC
Last enriched: 10/12/2026, 18:03:21 UTC
Last updated: 10/12/2026, 18:08:17 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.