Critical severity10.0NVD Advisory· Published Oct 12, 2026

CVE-2026-108917

Description

A vulnerability was determined in Edimax BR-6208AC 1.32. This issue affects some unknown processing of the file /goform/formAutoFWupgrade. Executing a manipulation of the argument tftpsIP can lead to command injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Edimax/BR-6208AC V1llm-fuzzy
Range: <1.32

Patches

Vulnerability mechanics

References

github.com/fizz-is-on-the-way/Iot_vuls/tree/main/BR-6208AC/RCE_formAutoFWupgradenvd
vuldb.com/cve/CVE-2026-108917nvd
vuldb.com/submit/977199nvd
vuldb.com/vuln/416729nvd
vuldb.com/vuln/416729/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.650
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000