---
id: CVE-2026-116227
title: Edimax BR-6208AC Virtual Server cross site scripting
summary: >-
  A vulnerability has been found in Edimax BR-6208AC 1.32. This vulnerability
  affects unknown code of the component Virtual Server Page. The manipulation
  leads to cross site scripting. Remote exploitation of the attack is possible.
  The exp…
severity: low
cvss: 2.4
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R'
cvssSource: cna
cwe:
  - CWE-79
  - CWE-94
vendor: Edimax
product: BR-6208AC
affected:
  - BR-6208AC 1.32
published: '2026-10-26'
updated: '2026-10-26'
sourceUpdated: '2026-10-26T06:45:12.525Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-116227'
references:
  - url: 'https://vuldb.com/vuln/426276'
    label: VDB-426276 | Edimax BR-6208AC Virtual Server cross site scripting
  - url: 'https://vuldb.com/vuln/426276/cti'
    label: 'VDB-426276 | CTI Indicators (IOB, IOC, TTP)'
  - url: 'https://vuldb.com/cve/CVE-2026-116227'
    label: CVE-2026-116227 | CVE Analysis and Report
  - url: 'https://vuldb.com/submit/1005199'
    label: 'Submit #1005199 | Edimax BR-6208AC BR-6208AC_1.32 Cross Site Scripting'
  - url: >-
      https://github.com/fizz-is-on-the-way/Iot_vuls/tree/main/BR-6208AC/XSS_Virtual_Server
tags:
  - cve.org
ingestedAt: '2026-10-26T07:20:03.477Z'
---

## Overview

A vulnerability has been found in Edimax BR-6208AC 1.32. This vulnerability affects unknown code of the component Virtual Server Page. The manipulation leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

## Affected

- `BR-6208AC 1.32`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.