---
id: CVE-2026-108933
title: A vulnerability was identified in Edimax BR-6208AC 1.32
summary: >-
  A vulnerability was identified in Edimax BR-6208AC 1.32. Affected is an
  unknown function of the file /goform/formFilter. Such manipulation leads to
  cross site scripting. The attack can be executed remotely. The exploit is
  publicly availa…
severity: low
cvss: 2.4
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N'
cwe:
  - CWE-79
  - CWE-94
published: '2026-10-12'
updated: '2026-10-12'
sourceUpdated: '2026-10-12T22:17:03.630'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-108933'
references:
  - url: >-
      https://github.com/fizz-is-on-the-way/Iot_vuls/tree/main/BR-6208AC/XSS_Access_Control
    label: cna@vuldb.com
  - url: 'https://vuldb.com/cve/CVE-2026-108933'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/submit/1005175'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/vuln/416757'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/vuln/416757/cti'
    label: cna@vuldb.com
tags:
  - nvd
ingestedAt: '2026-10-12T23:07:25.634Z'
---

## Overview

A vulnerability was identified in Edimax BR-6208AC 1.32. Affected is an unknown function of the file /goform/formFilter. Such manipulation leads to cross site scripting. The attack can be executed remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.