Paper/Archive/CVE-2026-122051

CVE-2026-122051

Edimax BR-6208AC — Edimax BR-6208AC mp command injection

CVSS 10.0 (CNA)10.0 / 10 × 3030.0 Not in CISA KEV+300.0 No EPSS score.000 × 200.0 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

A flaw has been found in Edimax BR-6208AC 1.32. Affected by this vulnerability is an unknown functionality of the file /goform/mp. Executing a manipulation can lead to command injection. The attack may be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected

ProductAffectedFixed inSource

BR-6208AC1.32–CNA

Scores by source

VulDB (CNA)10.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P

VulDB (CNA)10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:C

VulDB (CNA)10.0CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:C

References

refvuldb.com/vuln/431135 refvuldb.com/vuln/431135/cti writeupvuldb.com/cve/CVE-2026-122051 writeupvuldb.com/submit/1025459 exploitgithub.com/fizz-is-on-the-way/Iot_vuls/tree/main/BR-6208AC/RCE_mp