{"id":"EM-20261105-DHJH","url":"https://cyber.eventmonitor.net/incident/EM-20261105-DHJH/critical-edimax-br-6208ac-vulnerability-cve-2026-122051/","type":"cve","title":"Critical Edimax BR-6208AC Vulnerability (CVE-2026-122051)","subtitle":"CVE-2026-122051","subject":"CVE-2026-122051","status":"Developing","severity":"critical","affected":[],"headline":null,"born":"2026-11-05T00:33:08.000Z","firstSignal":"2026-11-05T00:17:24.013Z","lastSignal":"2026-11-05T00:33:08.000Z","updated":"2026-11-05T02:06:24.577Z","revision":1,"life":[{"status":"Born","at":"2026-11-05T00:33:08.000Z","why":"second independent source: C29 CIRCL Vulnerability-Lookup"},{"status":"Developing","at":"2026-11-05T00:33:08.000Z","why":"signals keep joining"}],"changeLog":[{"at":"2026-11-05T00:17:24.013Z","what":"First signal: C6 NVD CVE API 2.0"},{"at":"2026-11-05T00:33:08.000Z","what":"Born: second source, C29 CIRCL Vulnerability-Lookup. Page EM-20261105-DHJH created."}],"stages":[{"name":"Disclosed","at":"2026-11-05T00:17:24.013Z","detail":"C6 NVD published"},{"name":"Scored","at":"2026-11-05T00:17:24.013Z","detail":"CVSS 9.3"},{"name":"Exploited","at":null,"detail":"No exploitation reported"},{"name":"Advisories","at":null,"detail":"None yet"},{"name":"Vendor Response","at":null,"detail":"None in sources yet"},{"name":"Resolved","at":null,"detail":"After 14 quiet days"}],"signals":[{"at":"2026-11-05T00:17:24.013Z","source":"C6","sourceName":"NVD CVE API 2.0","role":"Database","severity":4,"title":"CVE-2026-122051 (CVSS 9.3)","text":"A flaw has been found in Edimax BR-6208AC 1.32. Affected by this vulnerability is an unknown functionality of the file /goform/mp. Executing a manipulation can lead to command injection. The attack may be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-122051"},{"at":"2026-11-05T00:33:08.000Z","source":"C29","sourceName":"CIRCL Vulnerability-Lookup","role":"Database","severity":2,"title":"GHSA-3r8p-4pf8-9jq4 / CVE-2026-122051","text":"A flaw has been found in Edimax BR-6208AC 1.32. Affected by this vulnerability is an unknown functionality of the file /goform/mp. Executing a manipulation can lead to command injection. The attack may be launched remotely. The exploit has been published and may be used. The vendor was contacted ear","url":"https://vulnerability.circl.lu/vuln/GHSA-3r8p-4pf8-9jq4"}],"crowd":[],"reference":{"nvd":{"published":"2026-11-05T00:17:24.013","score":9.3,"severity":"CRITICAL","desc":"A flaw has been found in Edimax BR-6208AC 1.32. Affected by this vulnerability is an unknown functionality of the file /goform/mp. Executing a manipulation can lead to command injection. The attack may be launched remotely. The exploit has been published and may be used. The vendor was contacted ear","product":"","seen":1793844384577},"kev":null,"epss":null,"p0":false},"mergedInto":null,"publisher":"Event Monitor Cyber"}