---
id: CVE-2026-108933
title: A vulnerability was identified in Edimax BR-6208AC 1.32
summary: >-
  A vulnerability was identified in Edimax BR-6208AC 1.32. Affected is an
  unknown function of the file /goform/formFilter. Such manipulation leads to
  cross site scripting. The attack can be executed remotely. The exploit is
  publicly availa…
severity: low
cvss: 2.4
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N'
cwe:
  - CWE-79
  - CWE-94
vendor: Edimax
product: BR-6208AC
affected:
  - BR-6208AC 1.32
published: '2026-10-12'
updated: '2026-10-16'
sourceUpdated: '2026-10-16T18:17:29.957'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-108933'
references:
  - url: >-
      https://github.com/fizz-is-on-the-way/Iot_vuls/tree/main/BR-6208AC/XSS_Access_Control
    label: cna@vuldb.com
  - url: 'https://vuldb.com/cve/CVE-2026-108933'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/submit/1005175'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/vuln/416757'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/vuln/416757/cti'
    label: cna@vuldb.com
tags:
  - nvd
  - cve.org
  - exploit-available
epss: 0.00202
epssPercentile: 0.10025
exploitAvailable: true
ssvc:
  exploitation: poc
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-10-16T16:27:48.237763Z'
ingestedAt: '2026-10-12T23:07:25.634Z'
---

## Overview

A vulnerability was identified in Edimax BR-6208AC 1.32. Affected is an unknown function of the file /goform/formFilter. Such manipulation leads to cross site scripting. The attack can be executed remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.