OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-108936

LOW · CVSS 2.4 Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-10-12 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

A cross-site scripting vulnerability exists in the QoS Page of the Edimax BR-6208AC router firmware version 1.32, allowing remote attackers to manipulate the affected component. Although the severity is classified as low, the potential for exploitation could lead to unauthorized access or data manipulation. Organizations using this router should prioritize patching or mitigating this vulnerability to protect against possible attacks.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit
GitHub PoC Links

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-108936
Severity
LOW
CVSS
2.4
EPSS
N/A

Original NVD Description

A security vulnerability has been detected in Edimax BR-6208AC 1.32. This affects an unknown part of the file /goform/formQoS of the component QoS Page. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.