Live › vulnerability › CVE-2026-116227
Go to dashboardThe Virtual Server configuration page in Edimax BR-6208AC firmware 1.32 fails to sanitize input, so crafted input can inject script. An attacker who gets a user to open a malicious link could run script in the router admin session.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 07:28 UTC. All times on this page are UTC.
Owners of Edimax BR-6208AC routers running firmware 1.32 are exposed, most relevant where the admin interface is reachable from untrusted networks or where an admin browses while logged in. Teams that do not run this model can skip it. The sources do not state whether default configuration is affected.
No product ranges from the sources yet.
1.32 is the affected version per the sources.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability has been found in Edimax BR-6208AC 1.32. This vulnerability affects unknown code of the component Virtual Server Page. The manipulation leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
This page as .md · .json · in your agent: get_signal("CVE-2026-116227")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.