What’s Vulnerable › Products

Edimax BR-6208AC vulnerabilities

18 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 17 published in the last 12 months.

Check whether your Edimax BR-6208AC version is affected

Latest Edimax BR-6208AC vulnerabilities

• CVE-2026-108936 — Edimax BR-6208AC QoS Page formQoS cross site scripting (CVSS 2.4)
• CVE-2026-108935 — Edimax BR-6208AC Port Forwarding formPortFw cross site scripting (CVSS 2.4)
• CVE-2026-108934 — Edimax BR-6208AC HTTP Blocking formUrlb cross site scripting (CVSS 2.4)
• CVE-2026-108933 — Edimax BR-6208AC formFilter cross site scripting (CVSS 2.4)
• CVE-2026-108918 — Edimax BR-6208AC formWlanMP command injection (CVSS 10.0)
• CVE-2026-108917 — Edimax BR-6208AC formAutoFWupgrade command injection (CVSS 10.0)
• CVE-2026-108916 — Edimax BR-6208AC formAccept command injection (CVSS 8.3)
• CVE-2026-108915 — Edimax BR-6208AC formWlanMP buffer overflow (CVSS 9.9)
• CVE-2026-108914 — Edimax BR-6208AC formWlSiteSurvey buffer overflow (CVSS 9.9)
• CVE-2026-7685 — Edimax BR-6208AC setWAN buffer overflow (CVSS 8.8)
• CVE-2026-7682 — Edimax BR-6208AC L2TP Mode setWAN command injection (CVSS 6.3)
• CVE-2026-1972 — Edimax BR-6208AC auth_check_userpass2 default credentials (CVSS 7.5)
• CVE-2025-70161 — (CVSS 9.8)
• CVE-2025-15258 — Edimax BR-6208AC Web-based Configuration formALGSetup redirect (CVSS 6.1)
• CVE-2025-15257 — Edimax BR-6208AC Web-based Configuration formRoute command injection (CVSS 9.8)
• CVE-2025-15256 — Edimax BR-6208AC Web-based Configuration formStaDrvSetup command injection (CVSS 9.8)
• CVE-2025-14910 — Edimax BR-6208AC FTP Daemon Service handle_retr path traversal (CVSS 6.5)