CVE-2026-108914
Received Received - Intake

Buffer Overflow in Edimax BR-6208AC Router

Publication date: 2026-10-12

Last updated on: 2026-10-12

Assigner: VulDB

Description
A flaw has been found in Edimax BR-6208AC 1.32. Affected by this issue is some unknown functionality of the file /goform/formWlSiteSurvey. This manipulation of the argument ifname causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-12
Last Modified
2026-10-12
Generated
2026-10-12
AI Q&A
2026-10-12
EPSS Evaluated
N/A
NVD
CVE-2026-108914
EUVD
EUVD-2026-97574

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Edimax BR-6208AC 1.32

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-119 The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
CWE-120 The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-108914 is a buffer overflow vulnerability in the Edimax BR-6208AC router firmware version 1.32. It occurs in the /goform/formWlSiteSurvey endpoint when the ifname parameter is manipulated in a POST request. The issue arises because the ifname input is copied into a fixed-size buffer without proper bounds checking, allowing an attacker to overflow the buffer by providing excessively long input.

Detection Guidance

To detect this vulnerability, check if your Edimax BR-6208AC router is running firmware version BR-6208AC_1.32. You can verify this by accessing the router's admin panel or via SSH if enabled. Use network scanning tools like nmap to identify the device and its firmware version. If the device is exposed to the internet, attempt a POST request to /goform/formWlSiteSurvey with a large ifname parameter to observe abnormal behavior such as crashes.

Commands to check the device: 1) SSH into the router and run 'cat /etc/version' or similar to confirm firmware. 2) Use 'ps' to check if the web server process is running. 3) Monitor logs for crashes or unusual activity.

Impact Analysis

This vulnerability can allow remote attackers to crash the router's web server by sending a specially crafted POST request. This would make the device unresponsive, potentially disrupting network connectivity. Since the exploit has been published, attackers could use it without needing advanced skills.

Mitigation Strategies

Since the device is no longer supported, the best mitigation is to disconnect it from the internet or any untrusted networks immediately. Replace it with a supported router model. If replacement is not possible, isolate the device on a separate network segment with strict access controls. Disable remote administration features if they are enabled.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-108914. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart