High severity8.3NVD Advisory· Published Oct 12, 2026

CVE-2026-108916

Description

A vulnerability was found in Edimax BR-6208AC 1.32. This vulnerability affects unknown code of the file /goform/formAccept. Performing a manipulation of the argument submit-url results in command injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Edimax/BR-6208AC V1llm-fuzzy
Range: <1.32
Fizz Is On The Way/Iot_vulsllm-fuzzy
Range: <1.32

Patches

Vulnerability mechanics

References

github.com/fizz-is-on-the-way/Iot_vuls/tree/main/BR-6208AC/RCE_formAcceptnvd
vuldb.com/cve/CVE-2026-108916nvd
vuldb.com/submit/977198nvd
vuldb.com/vuln/416728nvd
vuldb.com/vuln/416728/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.540
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000