CVE-2026-108935

Received Received - Intake

Cross-Site Scripting in Edimax BR-6208AC Router

Publication date: 2026-10-12

Last updated on: 2026-10-12

Assigner: VulDB

Description

A weakness has been identified in Edimax BR-6208AC 1.32. Affected by this issue is some unknown functionality of the file /goform/formPortFw of the component Port Forwarding Page. Executing a manipulation can lead to cross site scripting. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-12

Last Modified

2026-10-12

Generated

2026-10-13

AI Q&A

2026-10-13

EPSS Evaluated

N/A

NVD

CVE-2026-108935

Affected Vendors & Products

Vendor	Product	Version / Range
Edimax	BR-6208AC	1.32

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-79	The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
CWE-94	The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Attack-Flow Graph

Executive Summary

This vulnerability is a cross-site scripting (XSS) weakness in the Edimax BR-6208AC router version 1.32. It exists in the Port Forwarding Page component, specifically in the /goform/formPortFw file. An attacker can exploit this by manipulating input to inject malicious scripts, which may execute in a user's browser when accessing the affected page.

Detection Guidance

To detect this vulnerability, check if your Edimax BR-6208AC router is running firmware version 1.32. Inspect the Port Forwarding Page at /goform/formPortFw for unusual input fields or unexpected behavior. Test for XSS by attempting to inject scripts in input fields and observing if they execute.

Impact Analysis

The impact is limited but includes potential theft of session cookies, defacement of web pages, or redirection to malicious sites. The attack requires some user interaction (like clicking a link) and is harder to exploit due to needing higher privileges (UI:R in CVSS). It does not directly expose sensitive data but could enable further attacks.

Compliance Impact

This XSS vulnerability could indirectly impact compliance by potentially exposing user data if exploited. GDPR and HIPAA require protection against unauthorized data access or modification. While this flaw alone may not violate these standards, it could contribute to a larger security incident affecting compliance.

Mitigation Strategies

Immediately update the router firmware to the latest version if available. Disable the Port Forwarding feature if not needed. Implement input validation on the router's web interface. Monitor network traffic for suspicious activity targeting the router's web interface.

Hi! I’m here to help you understand CVE-2026-108935. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70