BR-6208AC · CVE-2026-122051 · Infrastructure
NO FIX YET
Edimax BR-6208AC firmware 1.32 has a flaw in the /goform/mp web endpoint that allows command injection. A remote attacker who sends a crafted request can run commands on the router, and a public exploit has been published.
first public Nov 5, 2026 · 1 public exploit · 2 sources
Check it with your coding agent
It checks your repository and tells you if you’re affected, with the fix.
Owners of Edimax BR-6208AC routers running firmware 1.32. The researcher says the /goform/mp 'command' parameter reaches system() and needs no login, but this was shown in a firmware emulator (qemu), not on a real device. Routers whose admin page is reachable only from a trusted LAN face less exposure; the attacker still needs network access to the web interface.
Not affected if admin-interface-not-exposed, other-firmware
Who cares br-6208ac, edimax, home-router, iot
No fix yet, per the sources.
A flaw has been found in Edimax BR-6208AC 1.32. Affected by this vulnerability is an unknown functionality of the file /goform/mp. Executing a manipulation can lead to command injection. The attack may be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.