CVE-2026-32841criticalCWE-1108

CVE-2026-32841: falha crítica em Edimax GS-5008PL

Edimax GS-5008PL <= 1.00.54 Global Authentication State Across All Clients

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Edimax GS-5008PL

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.2epss 0.6%
Edimax GS-5008PL firmware versions 1.00.54 and prior contain an authentication bypass vulnerability that allows unauthenticated attackers to access the management interface. Attackers can exploit the global authentication flag mechanism to gain administrative access without credentials after any user authenticates, enabling unauthorized password changes, firmware uploads, and configuration modifications.
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
EDIMAX Technology Co., Ltd. · Edimax GS-5008PL
CVEs relacionadas — Edimax GS-5008PL

No mesmo produto, das mais perigosas para as menos.

CVE-2026-32840MEDIUMEdimax GS-5008PL <= 1.00.54 Stored XSS via Device NameEPSS 0.2%CVE-2026-32839MEDIUMEdimax GS-5008PL <= 1.00.54 CSRF via Management CGI EndpointsEPSS 0.2%CVE-2026-32842HIGHEdimax GS-5008PL <= 1.00.54 Admin Credentials Stored in CleartextEPSS 0.2%CVE-2026-32838HIGHEdimax GS-5008PL <= 1.00.54 Transmits Credentials Over Cleartext HTTPEPSS 0.1%