CVE-2026-108914

The Edimax BR-6208AC (version 1.32) is susceptible to a buffer overflow vulnerability in an unspecified functionality within the /goform/formWlSiteSurvey file. The flaw is triggered by the manipulation of the ifname argument, which allows for remote exploitation . While the exploit has been publi...

EUVD-2026-97574

A flaw has been found in Edimax BR-6208AC 1.32. Affected by this issue is some unknown functionality of the file /goform/formWlSiteSurvey. This manipulation of the argument ifname causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be used...

CVE-2026-108914 Edimax BR-6208AC formWlSiteSurvey buffer overflow

A flaw has been found in Edimax BR-6208AC 1.32. Affected by this issue is some unknown functionality of the file /goform/formWlSiteSurvey. This manipulation of the argument ifname causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be used...

CVE-2026-108896

A vulnerability was found in Linksys E1700 1.0.0.4.003. This affects the function setLinksysIpv6 of the file /goform/setLinksysIpv6. The manipulation of the argument 6rdprefix/6rdprefixlen results in os command injection. The attack can be launched remotely. The exploit has been made public and...

CVE-2026-108896 Linksys E1700 setLinksysIpv6 os command injection

A vulnerability was found in Linksys E1700 1.0.0.4.003. This affects the function setLinksysIpv6 of the file /goform/setLinksysIpv6. The manipulation of the argument 6rdprefix/6rdprefixlen results in os command injection. The attack can be launched remotely. The exploit has been made public and...

EUVD-2026-97470

A vulnerability was found in Linksys E1700 1.0.0.4.003. This affects the function setLinksysIpv6 of the file /goform/setLinksysIpv6. The manipulation of the argument 6rdprefix/6rdprefixlen results in os command injection. The attack can be launched remotely. The exploit has been made public and...

CVE-2026-108893

A vulnerability was identified in Linksys E1700 up to 1.0.0.4.003. This issue affects the function setVlan of the file /goform/setVlan. Such manipulation of the argument vlanset leads to stack-based buffer overflow. The attack may be launched remotely. The exploit is publicly available and might ...

CVE-2026-108895

A vulnerability exists in Linksys E1700 version 1.0.0.4.003 involving OS command injection . The flaw is located in the setDMZ function within the /goform/setDMZ file. An attacker can trigger the injection by manipulating the MAC_addr argument. This attack can be executed remotely , and a public ...

CVE-2026-108895 Linksys E1700 setDMZ os command injection

A weakness has been identified in Linksys E1700 1.0.0.4.003. The affected element is the function setDMZ of the file /goform/setDMZ. Executing a manipulation of the argument MACaddr can lead to os command injection. The attack can be executed remotely. The exploit has been made available to the...

EUVD-2026-97436

A security flaw has been discovered in Linksys E1700 1.0.0.4.003. Impacted is the function addStaticRoute of the file /goform/addStaticRoute of the component Static Route Handler. Performing a manipulation of the argument...

CVE-2026-108894 Linksys E1700 Static Route addStaticRoute os command injection

A security flaw has been discovered in Linksys E1700 1.0.0.4.003. Impacted is the function addStaticRoute of the file /goform/addStaticRoute of the component Static Route Handler. Performing a manipulation of the argument...

CVE-2026-108893 Linksys E1700 setVlan stack-based overflow

A vulnerability was identified in Linksys E1700 up to 1.0.0.4.003. This issue affects the function setVlan of the file /goform/setVlan. Such manipulation of the argument vlanset leads to stack-based buffer overflow. The attack may be launched remotely. The exploit is publicly available and might ...

EUVD-2026-97438

A vulnerability was identified in Linksys E1700 up to 1.0.0.4.003. This issue affects the function setVlan of the file /goform/setVlan. Such manipulation of the argument vlanset leads to stack-based buffer overflow. The attack may be launched remotely. The exploit is publicly available and might ...

CVE-2026-108935: Improper Neutralization of Input During Web Page Generation

A weakness has been identified in Edimax BR-6208AC 1.32. Affected by this issue is some unknown functionality of the file /goform/formPortFw of the component Port Forwarding Page. Executing a manipulation can lead to cross site scripting. The attack may be performed from remote. The exploit has...

CVE-2026-108933: Improper Neutralization of Input During Web Page Generation

A vulnerability was identified in Edimax BR-6208AC 1.32. Affected is an unknown function of the file /goform/formFilter. Such manipulation leads to cross site scripting. The attack can be executed remotely. The exploit is publicly available and might be used. The vendor was contacted early about...

CVE-2026-108934: Improper Neutralization of Input During Web Page Generation

A security flaw has been discovered in Edimax BR-6208AC 1.32. Affected by this vulnerability is an unknown functionality of the file /goform/formUrlb of the component HTTP Blocking Page. Performing a manipulation results in cross site scripting. The attack is possible to be carried out remotely...

PT-2026-110982

Name of the Vulnerable Software and Affected Versions Edimax BR-6208AC version 1.32 Description A security flaw exists in the HTTP Blocking Page component. A remote attacker can perform a manipulation of the /goform/formUrlb endpoint to execute cross site scripting, which is a technique used to...

PT-2026-110868

Name of the Vulnerable Software and Affected Versions Edimax BR-6208AC version 1.32 Description Command injection is possible via remote manipulation of the readE2P argument within a function in the /goform/formWlanMP endpoint. This issue affects products that are no longer supported by the...

PT-2026-110981

Name of the Vulnerable Software and Affected Versions Edimax BR-6208AC version 1.32 Description A remote cross site scripting issue exists in the /goform/formFilter file. This occurs when an unknown function within that file fails to properly handle input, allowing an attacker to execute maliciou...

CVE-2026-108894: Improper Neutralization of Special Elements used in an OS Command

A security flaw has been discovered in Linksys E1700 1.0.0.4.003. Impacted is the function addStaticRoute of the file /goform/addStaticRoute of the component Static Route Handler. Performing a manipulation of the argument...