---
id: CVE-2026-108915
title: A vulnerability has been found in Edimax BR-6208AC 1.32
summary: >-
  A vulnerability has been found in Edimax BR-6208AC 1.32. This affects an
  unknown part of the file /goform/formWlanMP. Such manipulation of the argument
  ateBW leads to buffer overflow. The attack can be executed remotely. The
  exploit has …
severity: critical
cvss: 9.9
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H'
cwe:
  - CWE-119
  - CWE-120
published: '2026-10-12'
updated: '2026-10-12'
sourceUpdated: '2026-10-12T18:17:21.770'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-108915'
references:
  - url: >-
      https://github.com/fizz-is-on-the-way/Iot_vuls/tree/main/BR-6208AC/BufferOverflow_formWlanMP
    label: cna@vuldb.com
  - url: 'https://vuldb.com/cve/CVE-2026-108915'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/submit/977196'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/vuln/416727'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/vuln/416727/cti'
    label: cna@vuldb.com
tags:
  - nvd
ingestedAt: '2026-10-12T19:01:57.225Z'
---

## Overview

A vulnerability has been found in Edimax BR-6208AC 1.32. This affects an unknown part of the file /goform/formWlanMP. Such manipulation of the argument ateBW leads to buffer overflow. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.