Medium severity5.4NVD Advisory· Published Mar 17, 2026· Updated Jun 17, 2026
CVE-2026-32840
CVE-2026-32840
Description
Edimax GS-5008PL firmware version 1.00.54 and prior contain a stored cross-site scripting vulnerability in the system_name_set.cgi script that allows attackers to inject arbitrary script code by manipulating the sysName parameter. Attackers can send a crafted POST request with malicious script payload that executes when management pages including system_data.js are viewed by administrators.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- EDIMAX Technology Co., Ltd./Edimax GS-5008PLv5Range: 0
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.