Critical severity10.0NVD Advisory· Published Oct 12, 2026

CVE-2026-108918

Description

A vulnerability was identified in Edimax BR-6208AC 1.32. Impacted is an unknown function of the file /goform/formWlanMP. The manipulation of the argument readE2P leads to command injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Edimax/BR-6208AC V1llm-fuzzy
Range: <1.32

Patches

Vulnerability mechanics

References

github.com/fizz-is-on-the-way/Iot_vuls/tree/main/BR-6208AC/RCE_formWlanMPnvd
vuldb.com/cve/CVE-2026-108918nvd
vuldb.com/submit/977200nvd
vuldb.com/vuln/416730nvd
vuldb.com/vuln/416730/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.650
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000