critical
advisory
Edimax BR-6208AC: Command injection via /goform/mp (CVE-2026-122051)
A flaw in the Edimax BR-6208AC version 1.32, specifically in the /goform/mp file, allows for command injection that may be launched remotely. The vendor has not responded to disclosure attempts.
CVE search metadata
CVE search record: CVE-2026-122051. Severity: critical. CVSS: 10.0. KEV: no. Product: BR-6208AC (1.32). Brief: Edimax BR-6208AC: Command injection via /goform/mp (CVE-2026-122051). Brief link: https://feed.craftedsignal.io/briefs/2026-11-edimax-command-injection/
Triage facts
Revision 1- Applicability
- BR-6208AC (1.32)
- Evidence
- Unknown
- Severity
- Critical
- Sources
- 1 public source
- Freshness
- Revision 1Nov 5, 01:18 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
CVE-2026-122051 is a command injection vulnerability affecting the Edimax BR-6208AC router, version 1.32. The flaw exists in the /goform/mp file. The attack can be launched remotely, and a public exploit exists. The vendor was contacted but did not respond. The CVSS v3.1 base score is 10.0.