Edimax BR-6208AC mp command injection

Summary

A flaw has been found in Edimax BR-6208AC 1.32. Affected by this vulnerability is an unknown functionality of the file /goform/mp. Executing a manipulation can lead to command injection. The attack may be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Remediation

1. Inventory every Edimax BR-6208AC deployment, including staging.
2. No fixed version appears in the public sources yet. Check the references below and the vendor directly.

References

• Advisoryhttps://vuldb.com/cve/CVE-2026-122051
• Advisoryhttps://vuldb.com/submit/1025459
• Referencehttps://vuldb.com/vuln/431135
• Referencehttps://vuldb.com/vuln/431135/cti
• Referencehttps://github.com/fizz-is-on-the-way/Iot_vuls/tree/main/BR-6208AC/RCE_mp