Description
A security flaw has been discovered in Edimax BR-6208AC 1.32. Affected by this vulnerability is an unknown functionality of the file /goform/formUrlb of the component HTTP Blocking Page. Performing a manipulation results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Edimax | BR-6208AC | 1.32 | — |
References
- VDB-416758 | Edimax BR-6208AC HTTP Blocking formUrlb cross site scripting vdb-entry
- VDB-416758 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- CVE-2026-108934 | CVE Analysis and Report third-party-advisory
- Submit #1005176 | Edimax BR-6208AC BR-6208AC_1.32 Cross Site Scripting third-party-advisory
- https://github.com/fizz-is-on-the-way/Iot_vuls/tree/main/BR-6208AC/XSS_HTTP_Blocking exploit