{"id":"CVE-2026-108915","published":"2026-10-12T18:17:21.770","lastModified":"2026-10-13T17:17:22.000","description":"A vulnerability has been found in Edimax BR-6208AC 1.32. This affects an unknown part of the file /goform/formWlanMP. Such manipulation of the argument ateBW leads to buffer overflow. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.","cvssScore":9.9,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-119","CWE-120"],"vendors":[],"products":[],"references":[{"url":"https://github.com/fizz-is-on-the-way/Iot_vuls/tree/main/BR-6208AC/BufferOverflow_formWlanMP","tags":[]},{"url":"https://vuldb.com/cve/CVE-2026-108915","tags":[]},{"url":"https://vuldb.com/submit/977196","tags":[]},{"url":"https://vuldb.com/vuln/416727","tags":[]},{"url":"https://vuldb.com/vuln/416727/cti","tags":[]}],"exploitRefs":[{"url":"https://github.com/fizz-is-on-the-way/Iot_vuls/tree/main/BR-6208AC/BufferOverflow_formWlanMP","tags":[]}],"hasPoc":true,"ai":{"summary":"A buffer overflow vulnerability exists in Edimax BR-6208AC router firmware version 1.32, where the 'ateBW' argument in the /goform/formWlanMP endpoint can be manipulated to trigger a heap-based buffer overflow. This allows remote attackers to execute arbitrary code with high privileges, potentially leading to complete system compromise.","exploitability":"The vulnerability is highly exploitable with minimal preconditions, requiring only network access to the affected router's web interface and the ability to send crafted HTTP requests to the vulnerable endpoint.","blast_radius":"If exploited, this vulnerability could allow attackers to gain full administrative control over affected routers, potentially enabling them to redirect traffic, steal credentials, or establish persistent backdoors on networks using these unsupported devices.","remediation":"Immediately disable the wireless management interface or restrict access to the /goform/formWlanMP endpoint to trusted IP addresses until a firmware update is available, as no fixed version has been published by the vendor for this specific vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","wireless","router","buffer-overflow"],"model":"garnet-coder","analyzedAt":"2026-10-13T08:46:25.170Z"}}