---
id: "CVE-2026-116227"
kind: "vulnerability"
aliases: ["CVE-2026-116227"]
title: "Edimax BR-6208AC router: Virtual Server page allows cross-site scripting"
severity: "low"
cvss: 3.3
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["br-6208ac", "edimax", "infrastructure", "routers", "self-hosted"]
not_affected_if: ["different-model", "patched-firmware"]
published_at: "2026-10-26T07:17:09+00:00"
first_seen_at: "2026-10-26T07:28:50+00:00"
updated_at: "2026-10-26T07:30:02+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-116227", "first_seen_at": "2026-10-26T07:28:50+00:00"}]
---

# Edimax BR-6208AC router: Virtual Server page allows cross-site scripting

The Virtual Server configuration page in Edimax BR-6208AC firmware 1.32 fails to sanitize input, so crafted input can inject script. An attacker who gets a user to open a malicious link could run script in the router admin session.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the router's firmware version in its admin interface under status or system information; `1.32` is the affected version per the sources.
- unknown for further detection steps; the sources do not say which parameter or request is affected.

## Fix

- unknown: the sources report the vendor did not respond and do not name a patched firmware version.
- Restrict router admin access to the local network and do not browse while logged into the admin interface, as a practical mitigation.

## Timeline

- 2026-10-26T07:28:50+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-116227

## From the sources

A vulnerability has been found in Edimax BR-6208AC 1.32. This vulnerability affects unknown code of the component Virtual Server Page. The manipulation leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_