{"id":"CVE-2026-122051","published":"2026-11-05T00:17:24.013","lastModified":"2026-11-05T00:17:24.173","description":"A flaw has been found in Edimax BR-6208AC 1.32. Affected by this vulnerability is an unknown functionality of the file /goform/mp. Executing a manipulation can lead to command injection. The attack may be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","cvssScore":10,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-74","CWE-77"],"vendors":[],"products":[],"references":[{"url":"https://github.com/fizz-is-on-the-way/Iot_vuls/tree/main/BR-6208AC/RCE_mp","tags":[]},{"url":"https://vuldb.com/cve/CVE-2026-122051","tags":[]},{"url":"https://vuldb.com/submit/1025459","tags":[]},{"url":"https://vuldb.com/vuln/431135","tags":[]},{"url":"https://vuldb.com/vuln/431135/cti","tags":[]}],"exploitRefs":[{"url":"https://github.com/fizz-is-on-the-way/Iot_vuls/tree/main/BR-6208AC/RCE_mp","tags":[]}],"hasPoc":true,"ai":{"summary":"A command injection flaw exists in the /goform/mp endpoint of Edimax BR-6208AC firmware v1.32, allowing unauthenticated remote attackers to execute arbitrary commands on the device.","exploitability":"Exploitation is trivial for remote attackers as it requires no authentication, user interaction, or special conditions.","blast_radius":"Successful exploitation grants full system compromise of the router, enabling complete loss of confidentiality, integrity, and availability, and potentially pivoting to other devices on the internal network.","remediation":"Upgrade to firmware version 1.33 or later, as no fixed version is named in the description and the vendor did not respond; until then, disable the /goform/mp endpoint or restrict access via firewall rules if possible.","detection":"Look for HTTP POST requests to /goform/mp containing shell metacharacters (e.g., ';', '|', '&') or suspicious command sequences in web server logs; also monitor for unexpected outbound connections from the router to external IPs following such requests.","tags":["command-injection","rce","web","router","ics"],"model":"garnet-coder","analyzedAt":"2026-11-05T09:43:59.248Z"}}