CVE-2026-108934

Publié : 12 octobre 2026

Modifié : 12 octobre 2026

Score CVSS

2.4

LOW

Description détaillée

A security flaw has been discovered in Edimax BR-6208AC 1.32. Affected by this vulnerability is an unknown functionality of the file /goform/formUrlb of the component HTTP Blocking Page. Performing a manipulation results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

Références et Patchs

https://github.com/fizz-is-on-the-way/Iot_vuls/tree/main/BR-6208AC/XSS_HTTP_Blocking https://vuldb.com/cve/CVE-2026-108934 https://vuldb.com/submit/1005176 https://vuldb.com/vuln/416758 https://vuldb.com/vuln/416758/cti

Dernières Vulnérabilités

CVE-2026-93892

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response.

VOIR DÉTAILS

CVE-2026-93891

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.

VOIR DÉTAILS

CVE-2026-92832

IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information.

VOIR DÉTAILS