CVE-2026-108934

Received Received - Intake

Cross Site Scripting in Edimax BR-6208AC Router

Publication date: 2026-10-12

Last updated on: 2026-10-12

Assigner: VulDB

Description

A security flaw has been discovered in Edimax BR-6208AC 1.32. Affected by this vulnerability is an unknown functionality of the file /goform/formUrlb of the component HTTP Blocking Page. Performing a manipulation results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-12

Last Modified

2026-10-12

Generated

2026-10-13

AI Q&A

2026-10-13

EPSS Evaluated

N/A

NVD

CVE-2026-108934

Affected Vendors & Products

Vendor	Product	Version / Range
Edimax	BR-6208AC	1.32

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-79	The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
CWE-94	The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Attack-Flow Graph

Executive Summary

This vulnerability is a cross-site scripting (XSS) flaw in the Edimax BR-6208AC router version 1.32. It exists in the HTTP Blocking Page component, specifically in the /goform/formUrlb file. An attacker can manipulate input to inject malicious scripts that execute in the context of a user's browser session. The exploit is publicly available and can be launched remotely.

Detection Guidance

This vulnerability involves a cross-site scripting flaw in the Edimax BR-6208AC router's HTTP Blocking Page. To detect it, check for unusual web traffic or requests targeting the /goform/formUrlb endpoint. Monitor logs for suspicious input patterns or unexpected script execution in web responses.

Impact Analysis

This XSS vulnerability could allow attackers to steal session cookies, redirect users to malicious sites, or perform actions on behalf of users. It may lead to unauthorized access to sensitive data, account hijacking, or phishing attacks. Users of affected Edimax BR-6208AC routers are at risk if they access the device's web interface.

Compliance Impact

This vulnerability allows for cross-site scripting (XSS) attacks due to improper input validation in the HTTP Blocking Page component of Edimax BR-6208AC 1.32. While it does not directly impact data confidentiality or integrity, XSS vulnerabilities can be exploited to steal session cookies or sensitive data, which may violate GDPR or HIPAA compliance if personal or health information is exposed.

Mitigation Strategies

Immediately update the Edimax BR-6208AC firmware if a patch is available. If no update exists, restrict access to the router's admin interface via firewall rules, disable remote management, and monitor for exploit attempts. Consider replacing the device if the vendor does not provide a fix.

Hi! I’m here to help you understand CVE-2026-108934. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70