Vulnerability feed

CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run Oct 26 08:05 UTC

Critical in the last 24 hours

1601 in 30 days

Newly known exploited

In the last 24 hours, CISA KEV and vendor reports

Sources checked

Every hour, see the list

New in the last 24 hours

181-70% vs 7-day avg of 598

2 critical, 65 high, 73 medium, 31 low

Expand	Severity	Score	Advisory	Title	Source	Published
	Low	1.9	CVE-2026-116227	A vulnerability has been found in Edimax BR-6208AC 1.32 EdimaxEdimax BR-6208AC	NVD	Oct 26 07:17 UTC
CVE-2026-116227A vulnerability has been found in Edimax BR-6208AC 1.32 Executive summary A stored cross-site scripting flaw has been reported in the Edimax BR-6208AC router, firmware BR-6208AC_1.32. The advisory describes it as a stored script injection in the Virtual Server page that can run for anyone who visits that page. The advisory does not state a severity score, and it does not say whether a fix or workaround is available. Technical summary The flaw is a stored cross-site scripting (XSS) vulnerability in the Comment field of the Virtual Server page under the Advanced settings. The advisory says the client-side check on the Comment value is not repeated on the server, so a crafted request sent through a proxy such as BurpSuite can save script content. The script then runs when the Virtual Server page is loaded, including by other users who visit that page. The attack preconditions, such as whether authentication is required, are not stated. The affected firmware is stated as BR-6208AC_1.32, and no fixed version is stated. No workaround and no detection guidance are stated. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from github.com/fizz-is-on-the-way/Iot_vuls/…C/XSS_Virtual_Server Impact if exploited ConfidentialityNone IntegrityLow AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Attack requirements None Privileges required High User interaction Passive CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects Edimax Edimax BR-6208AC NIST National Vulnerability DatabasePublished Oct 26, 2026 07:17 UTC Read the advisory
	Low	1.9	CVE-2026-108936	A security vulnerability has been detected in Edimax BR-6208AC 1.32 EdimaxEdimax BR-6208AC	NVD	Oct 12 23:17 UTC
CVE-2026-108936A security vulnerability has been detected in Edimax BR-6208AC 1.32 From the advisory A security vulnerability has been detected in Edimax BR-6208AC 1.32. This affects an unknown part of the file /goform/formQoS of the component QoS Page. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Impact if exploited ConfidentialityNone IntegrityLow AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Attack requirements None Privileges required High User interaction Passive CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects Edimax Edimax BR-6208AC NIST National Vulnerability DatabasePublished Oct 12, 2026 23:17 UTC Read the advisory
	Low	1.9	CVE-2026-108935	A weakness has been identified in Edimax BR-6208AC 1.32 EdimaxEdimax BR-6208AC	NVD	Oct 12 23:17 UTC
CVE-2026-108935A weakness has been identified in Edimax BR-6208AC 1.32 From the advisory A weakness has been identified in Edimax BR-6208AC 1.32. Affected by this issue is some unknown functionality of the file /goform/formPortFw of the component Port Forwarding Page. Executing a manipulation can lead to cross site scripting. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Impact if exploited ConfidentialityNone IntegrityLow AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Attack requirements None Privileges required High User interaction Passive CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects Edimax Edimax BR-6208AC NIST National Vulnerability DatabasePublished Oct 12, 2026 23:17 UTC Read the advisory
	Low	1.9	CVE-2026-108934	A security flaw has been discovered in Edimax BR-6208AC 1.32 EdimaxEdimax BR-6208AC	NVD	Oct 12 22:17 UTC
CVE-2026-108934A security flaw has been discovered in Edimax BR-6208AC 1.32 From the advisory A security flaw has been discovered in Edimax BR-6208AC 1.32. Affected by this vulnerability is an unknown functionality of the file /goform/formUrlb of the component HTTP Blocking Page. Performing a manipulation results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Impact if exploited ConfidentialityNone IntegrityLow AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Attack requirements None Privileges required High User interaction Passive CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects Edimax Edimax BR-6208AC NIST National Vulnerability DatabasePublished Oct 12, 2026 22:17 UTC Read the advisory
	Low	1.9	CVE-2026-108933	A vulnerability was identified in Edimax BR-6208AC 1.32 EdimaxEdimax BR-6208AC	NVD	Oct 12 22:17 UTC
CVE-2026-108933A vulnerability was identified in Edimax BR-6208AC 1.32 From the advisory A vulnerability was identified in Edimax BR-6208AC 1.32. Affected is an unknown function of the file /goform/formFilter. Such manipulation leads to cross site scripting. The attack can be executed remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Impact if exploited ConfidentialityNone IntegrityLow AvailabilityNone How it is exploited Attack vector Network Attack complexity Low Attack requirements None Privileges required High User interaction Passive CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects Edimax Edimax BR-6208AC NIST National Vulnerability DatabasePublished Oct 12, 2026 22:17 UTC Read the advisory
	Critical	9.3	CVE-2026-108918	A vulnerability was identified in Edimax BR-6208AC 1.32 EdimaxEdimax BR-6208AC	NVD	Oct 12 18:17 UTC
CVE-2026-108918A vulnerability was identified in Edimax BR-6208AC 1.32 From the advisory A vulnerability was identified in Edimax BR-6208AC 1.32. Impacted is an unknown function of the file /goform/formWlanMP. The manipulation of the argument readE2P leads to command injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Attack requirements None Privileges required None User interaction None CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects Edimax Edimax BR-6208AC NIST National Vulnerability DatabasePublished Oct 12, 2026 18:17 UTC Read the advisory
	Critical	9.3	CVE-2026-108917	A vulnerability was determined in Edimax BR-6208AC 1.32 EdimaxEdimax BR-6208AC	NVD	Oct 12 18:17 UTC
CVE-2026-108917A vulnerability was determined in Edimax BR-6208AC 1.32 From the advisory A vulnerability was determined in Edimax BR-6208AC 1.32. This issue affects some unknown processing of the file /goform/formAutoFWupgrade. Executing a manipulation of the argument tftpsIP can lead to command injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Attack requirements None Privileges required None User interaction None CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects Edimax Edimax BR-6208AC NIST National Vulnerability DatabasePublished Oct 12, 2026 18:17 UTC Read the advisory
	Medium	5.5	CVE-2026-108916	A vulnerability was found in Edimax BR-6208AC 1.32 EdimaxEdimax BR-6208AC	NVD	Oct 12 18:17 UTC
CVE-2026-108916A vulnerability was found in Edimax BR-6208AC 1.32 From the advisory A vulnerability was found in Edimax BR-6208AC 1.32. This vulnerability affects unknown code of the file /goform/formAccept. Performing a manipulation of the argument submit-url results in command injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer. Impact if exploited ConfidentialityLow IntegrityLow AvailabilityLow How it is exploited Attack vector Network Attack complexity Low Attack requirements None Privileges required None User interaction None CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects Edimax Edimax BR-6208AC NIST National Vulnerability DatabasePublished Oct 12, 2026 18:17 UTC Read the advisory
	High	8.6	CVE-2026-108915	A vulnerability has been found in Edimax BR-6208AC 1.32 EdimaxEdimax BR-6208AC	NVD	Oct 12 18:17 UTC
CVE-2026-108915A vulnerability has been found in Edimax BR-6208AC 1.32 From the advisory A vulnerability has been found in Edimax BR-6208AC 1.32. This affects an unknown part of the file /goform/formWlanMP. Such manipulation of the argument ateBW leads to buffer overflow. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Attack requirements None Privileges required Low User interaction None CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects Edimax Edimax BR-6208AC NIST National Vulnerability DatabasePublished Oct 12, 2026 18:17 UTC Read the advisory
	High	8.6	CVE-2026-108914	A flaw has been found in Edimax BR-6208AC 1.32 EdimaxEdimax BR-6208AC	NVD	Oct 12 17:17 UTC
CVE-2026-108914A flaw has been found in Edimax BR-6208AC 1.32 From the advisory A flaw has been found in Edimax BR-6208AC 1.32. Affected by this issue is some unknown functionality of the file /goform/formWlSiteSurvey. This manipulation of the argument ifname causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Attack requirements None Privileges required Low User interaction None CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects Edimax Edimax BR-6208AC NIST National Vulnerability DatabasePublished Oct 12, 2026 17:17 UTC Read the advisory
	Low	2.1	CVE-2026-100745	A vulnerability has been found in Edimax BR-6428nC 1.16 EdimaxEdimax BR-6428nC	NVD	Sep 27 02:17 UTC
CVE-2026-100745A vulnerability has been found in Edimax BR-6428nC 1.16 From the advisory A vulnerability has been found in Edimax BR-6428nC 1.16. The impacted element is an unknown function of the file /goform/formWizSurvey of the component Wireless Wizard Handler. The manipulation of the argument interface1/interface2 leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. Impact if exploited ConfidentialityLow IntegrityLow AvailabilityLow How it is exploited Attack vector Network Attack complexity Low Attack requirements None Privileges required Low User interaction None CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects Edimax Edimax BR-6428nC NIST National Vulnerability DatabasePublished Sep 27, 2026 02:17 UTC Read the advisory

Example	Finds
	Every word appears somewhere: title, summaries, IDs, vendor, or product
	An exact phrase
	One vendor. product: for a product, vp: for either
	Commas mean any of them, in every field
	Severity: critical, high, medium, low, or unknown
	CVSS score, with >, >=, <, or <=
	A score range
	Known exploited. is:kev works too, and kev:no leaves them out
	One source, by name
	Confidentiality impact: high, low, none, or any (low or high)
	Integrity and availability work the same way
	An advisory or CVE ID, or part of one
	A minus sign leaves out whatever the term matches

Vulnerability feed

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects