CVE-2026-108915

waiting for further signals

GHSA-98f9-ggg7-m2px ↗EUVD-2026-97725 ↗

no check availablenot proven exploitable

cve.orgpublic poc−558dkev

Edimax BR-6208AC 1.32

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

ETK-2026-1391, permanent identifier

cvss9.4cna vendorCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P

8d 10h 58msince last run

13mAI analysis

timeline

0 = trigger signal

public poc−18.3motrigger signal (cve.org) +0mowaiting for further signals+0.0mo

−12mo

−6mo

description

Edimax BR-6208AC devices running firmware 1.32 are affected by a buffer overflow in a WLAN-related request handler. A remote attacker able to reach the vulnerable management service can trigger the flaw; the evidence does not specify the resulting impact or authentication requirement.

mitigation

Disable remote administration and limit management access to trusted networks only. Replace affected unsupported devices with supported hardware, as no fixed BR-6208AC version is recorded.

check

exploit

automation

contextual

auth required

yes, low privileges

EPSS

0.45%37th percentile

agent run time

13m

cve.org record, t = 0

2026-10-12 17:15Z

Δ to public poc

−558d

Δ to kev

–

outcome

Contextual: an exploit technique exists, but no deterministic check could cover this one.

source signals

Public signals that triggered or updated the pipeline. These are inputs for the deltas above.

2026-10-12 17:15Z
cve_org: trigger signal, started the run
https://www.cve.org/CVERecord?id=CVE-2026-108915
2026-10-12 18:05Z
fizz-is-on-the-way/Iot_vuls
github · https://github.com/fizz-is-on-the-way/Iot_vuls

this entry in the feed

GET /api/v1/feed/CVE-2026-108915

{
  "etk_id": "ETK-2026-1391",
  "cve_id": "CVE-2026-108915",
  "display_id": "CVE-2026-108915",
  "ghsa_id": "GHSA-98f9-ggg7-m2px",
  "euvd_id": "EUVD-2026-97725",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Buffer overflow in Edimax BR-6208AC WLAN handler",
  "summary": "Edimax BR-6208AC devices running firmware 1.32 are affected by a buffer overflow in a WLAN-related request handler. A remote attacker able to reach the vulnerable management service can trigger the flaw; the evidence does not specify the resulting impact or authentication requirement.",
  "mitigation": "Disable remote administration and limit management access to trusted networks only. Replace affected unsupported devices with supported hardware, as no fixed BR-6208AC version is recorded.",
  "vendor": "Edimax",
  "product": "BR-6208AC",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        "1.32"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "BR-6208AC",
      "purl": null
    }
  ],
  "cwes": [
    120
  ],
  "cvss_score": 9.4,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P",
  "epss_score": 0.0045,
  "epss_percentile": 0.3742,
  "epss_asof": "2026-10-20",
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 13.257408266666667,
  "t0_at": "2026-10-12T17:15:16.448000+00:00",
  "signals": {
    "public_poc": {
      "at": "2025-04-02T07:53:04+00:00",
      "days": -558.3904218518519,
      "is_lower_bound": false,
      "measured_at": "2026-10-12T17:15:16.448000+00:00",
      "url": "https://github.com/fizz-is-on-the-way/Iot_vuls"
    },
    "trigger_signal": {
      "at": "2026-10-12T17:15:16.448000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-12T17:15:16.448000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-108915"
    }
  }
}

published 2026-10-12 17:38Z
last change 2026-10-21 04:45Z

Need the technical details behind an entry?

Every entry here shows what we attempted and when. The technical details, the generated exploit that fired it and the evidence behind the verdict are not public. Tell us about your use case and we’ll get back to you about extended API access.