CVE-2026-108914

Summary

A buffer overflow vulnerability in Edimax BR-6208AC router firmware version 1.32 allows remote attackers to execute arbitrary code through manipulation of the 'ifname' argument in the /goform/formWlSiteSurvey endpoint. This critical flaw enables remote code execution with high impact.

Exploitability

Exploitation is relatively straightforward as it's a remote buffer overflow with no user interaction required, though it may need specific network conditions to reach the vulnerable device.

Blast radius

The vulnerability affects all unsupported Edimax BR-6208AC routers running firmware version 1.32, potentially allowing attackers to gain full control of these devices remotely.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to firmware version 2.590 or later immediately, as this is the first fixed version mentioned in the vulnerability description.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.