CVE-2026-108915

Summary

A buffer overflow vulnerability exists in Edimax BR-6208AC router firmware version 1.32, where the 'ateBW' argument in the /goform/formWlanMP endpoint can be manipulated to trigger a heap-based buffer overflow. This allows remote attackers to execute arbitrary code with high privileges, potentially leading to complete system compromise.

Exploitability

The vulnerability is highly exploitable with minimal preconditions, requiring only network access to the affected router's web interface and the ability to send crafted HTTP requests to the vulnerable endpoint.

Blast radius

If exploited, this vulnerability could allow attackers to gain full administrative control over affected routers, potentially enabling them to redirect traffic, steal credentials, or establish persistent backdoors on networks using these unsupported devices.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Immediately disable the wireless management interface or restrict access to the /goform/formWlanMP endpoint to trusted IP addresses until a firmware update is available, as no fixed version has been published by the vendor for this specific vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.