CVE-2026-32840 is a stored cross-site scripting vulnerability affecting Edimax GS-5008PL devices running firmware version 1.00.54 and prior. The issue arises from improper neutralization of the sysName parameter in the system_name_set.cgi script, enabling attackers to inject arbitrary script code via crafted POST requests. This malicious code executes in the context of administrative management pages, potentially impacting administrators who view these pages. The vulnerability has a CVSS 4.0 score of 5.1, reflecting medium severity with network attack vector, low attack complexity, and requiring low privileges but user interaction.

Successful exploitation allows an attacker with low privileges to inject and execute arbitrary script code in the context of the administrative interface when administrators view affected pages. This could lead to unauthorized actions performed by the administrator's browser session. However, the vulnerability requires user interaction (administrator viewing the page) and low privileges, limiting the scope of impact. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, administrators should exercise caution when accessing management pages and consider restricting access to trusted users only. Monitoring for unusual POST requests targeting the sysName parameter may help detect exploitation attempts.