CVE-2026-108933

Publié : 12 octobre 2026

Modifié : 12 octobre 2026

Score CVSS

2.4

LOW

Description détaillée

A vulnerability was identified in Edimax BR-6208AC 1.32. Affected is an unknown function of the file /goform/formFilter. Such manipulation leads to cross site scripting. The attack can be executed remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

Références et Patchs

https://github.com/fizz-is-on-the-way/Iot_vuls/tree/main/BR-6208AC/XSS_Access_Control https://vuldb.com/cve/CVE-2026-108933 https://vuldb.com/submit/1005175 https://vuldb.com/vuln/416757 https://vuldb.com/vuln/416757/cti

Dernières Vulnérabilités

CVE-2026-93892

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response.

VOIR DÉTAILS

CVE-2026-93891

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.

VOIR DÉTAILS

CVE-2026-92832

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information.

VOIR DÉTAILS