Edimax has 12 CVEs on record. Disclosure cadence is accelerating: 12 in the last 90 days against 0 in the 90 before. The busiest recent month was October 2026 with 10. The median CVSS is 5.3 (medium), with 4 rated critical. None have a confirmed exploitation report. The dominant weakness classes are CWE-79 (5) and CWE-94 (5). Most affected products: BR-6208AC (10), BR-6428nC (2).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.3
- Publish → KEV
- —
- Last 90 days
- 12 prev 0
Worst active — by depth score
CVE-2026-108918Critical· 10.0A vulnerability was identified in Edimax BR-6208AC 1.3267CVE-2026-108917Critical· 10.0A vulnerability was determined in Edimax BR-6208AC 1.3267CVE-2026-108915Critical· 9.9A vulnerability has been found in Edimax BR-6208AC 1.3267CVE-2026-108914Critical· 9.9A flaw has been found in Edimax BR-6208AC 1.3267CVE-2026-108916High· 8.3A vulnerability was found in Edimax BR-6208AC 1.3258
Edimax vulnerabilities
CVEs affecting Edimax, newest first. Open any entry for full detail, references, and exploit status.
12 CVEsRSS
CVE-2026-116227Low· 2.4Edimax BR-6208AC Virtual Server cross site scripting
A vulnerability has been found in Edimax BR-6208AC 1.32. This vulnerability affects unknown code of the component Virtual Server Page. The manipulation leads to cross site scripting. Remote exploitation of the attack is possible. The exp…
CVE-2026-108936Low· 2.4PoCA security vulnerability has been detected in Edimax BR-6208AC 1.32
A security vulnerability has been detected in Edimax BR-6208AC 1.32. This affects an unknown part of the file /goform/formQoS of the component QoS Page. The manipulation leads to cross site scripting. It is possible to initiate the attac…
CVE-2026-108935Low· 2.4PoCA weakness has been identified in Edimax BR-6208AC 1.32
A weakness has been identified in Edimax BR-6208AC 1.32. Affected by this issue is some unknown functionality of the file /goform/formPortFw of the component Port Forwarding Page. Executing a manipulation can lead to cross site scripting…
CVE-2026-108934Low· 2.4PoCA security flaw has been discovered in Edimax BR-6208AC 1.32
A security flaw has been discovered in Edimax BR-6208AC 1.32. Affected by this vulnerability is an unknown functionality of the file /goform/formUrlb of the component HTTP Blocking Page. Performing a manipulation results in cross site sc…
CVE-2026-108933Low· 2.4PoCA vulnerability was identified in Edimax BR-6208AC 1.32
A vulnerability was identified in Edimax BR-6208AC 1.32. Affected is an unknown function of the file /goform/formFilter. Such manipulation leads to cross site scripting. The attack can be executed remotely. The exploit is publicly availa…
CVE-2026-108918Critical· 10.0PoCA vulnerability was identified in Edimax BR-6208AC 1.32
A vulnerability was identified in Edimax BR-6208AC 1.32. Impacted is an unknown function of the file /goform/formWlanMP. The manipulation of the argument readE2P leads to command injection. It is possible to initiate the attack remotely.…
CVE-2026-108917Critical· 10.0PoCA vulnerability was determined in Edimax BR-6208AC 1.32
A vulnerability was determined in Edimax BR-6208AC 1.32. This issue affects some unknown processing of the file /goform/formAutoFWupgrade. Executing a manipulation of the argument tftpsIP can lead to command injection. The attack may be …
CVE-2026-108916High· 8.3PoCA vulnerability was found in Edimax BR-6208AC 1.32
A vulnerability was found in Edimax BR-6208AC 1.32. This vulnerability affects unknown code of the file /goform/formAccept. Performing a manipulation of the argument submit-url results in command injection. The attack is possible to be c…
CVE-2026-108915Critical· 9.9PoCA vulnerability has been found in Edimax BR-6208AC 1.32
A vulnerability has been found in Edimax BR-6208AC 1.32. This affects an unknown part of the file /goform/formWlanMP. Such manipulation of the argument ateBW leads to buffer overflow. The attack can be executed remotely. The exploit has …
CVE-2026-108914Critical· 9.9PoCA flaw has been found in Edimax BR-6208AC 1.32
A flaw has been found in Edimax BR-6208AC 1.32. Affected by this issue is some unknown functionality of the file /goform/formWlSiteSurvey. This manipulation of the argument ifname causes buffer overflow. Remote exploitation of the attack…
CVE-2026-100745Medium· 6.3PoCA vulnerability has been found in Edimax BR-6428nC 1.16
A vulnerability has been found in Edimax BR-6428nC 1.16. The impacted element is an unknown function of the file /goform/formWizSurvey of the component Wireless Wizard Handler. The manipulation of the argument interface1/interface2 leads…
CVE-2026-96892Medium· 4.3PoCA flaw has been found in Edimax BR-6428nC 1.16
A flaw has been found in Edimax BR-6428nC 1.16. The impacted element is the function websRedirect of the component goform Handler. Executing a manipulation of the argument submit-url can lead to open redirect. The attack may be launched …