CVE-2026-122051

LOWCVSS 9.3 · CRITICAL

Signal is active with 7 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A flaw has been found in Edimax BR-6208AC 1.32. Affected by this vulnerability is an unknown functionality of the file /goform/mp. Executing a manipulation can lead to command injection. The attack may be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-74CWE-77

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 8 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Peaked at 7 mentions on most recent observed day (2026-11-05)
  • 8 total mentions across 2 days

Deep dive

Activity timeline8 mentions / 2d
02457Mentions · 2026-11-04: 1Mentions · 2026-11-05: 711-0411-05
Referenced assets8 URLs
Full discourse8 posts
  • cve.now@cvedotnow

    🆕 New CVE Edimax BR-6208AC: command injection in /goform/mp functionality (CVE-2026-122051) A remote attacker can run commands on the device over the network without logging in. No patch listed yet https://cve.now/CVE-2026-122051?utm_source=x&utm_medium=social&utm_campaign=cvedotnow&utm_content=critical

    230411.3K
    21.7K followersView on X
  • CVE@CVEnew

    CVE-2026-122051 A flaw has been found in Edimax BR-6208AC 1.32. Affected by this vulnerability is an unknown functionality of the file /goform/mp. Executing a manipulation can lead… https://www.cve.org/CVERecord?id=CVE-2026-122051

    10020945
    58.7K followersView on X
  • Enclave Radar@EnclaveRadar

    💥 Public exploit released: CVE-2026-122051 (CVSS 10.0, Enclave score 7/10) Edimax BR-6208AC · Remote code execution Remote, no login needed. A flaw has been found in Edimax BR-6208AC 1.32. https://app.enclave.ai/threat-feed/CVE-2026-122051

    00010116
    184 followersView on X
  • ThreatAft@ThreatAft

    🚨 CVE-2026-122051 (CVSS 10.0): Edimax BR-6208AC command injection via /goform/mp. Remote, unauthenticated. Public PoC. No vendor-confirmed fix. Check exposure first. If internet-facing, isolate or replace. 🔗 https://threataft.com/articles/cve-2026-122051-edimax-br-6208ac-command-injection?utm_source=twitter&utm_medium=social&utm_campaign=share #CyberSecurity #ThreatIntel

    0001098
    57 followersView on X
  • KKAA Solutions@kkaasolutions

    CVE-2026-122051 (CRITICAL / 10.0) — A flaw has been found in Edimax BR-6208AC 1.32. Affected by this vulnerability is an unknown functionality of the file /... https://nvd.nist.gov/vuln/detail/CVE-2026-122051 #server #cve #kkaasolutions

    0000043
    6 followersView on X
  • cve.now@cvedotnow

    🚨 Update: public exploit code for Edimax BR-6208AC CVE-2026-122051 is out on GitHub. No patch listed yet https://cve.now/CVE-2026-122051?utm_source=x&utm_medium=social&utm_campaign=cvedotnow&utm_content=exploit

    00000243
    21.7K followersView on X
  • cve.new@cvedotnew

    CVE-2026-122051 · CRITICAL · CVSS 10.0 Edimax BR-6208AC version 1.32 has a command injection flaw in an unknown functionality of the /goform/mp file, which may be exploited remotely. The impact is command injection. CVSS 2.0 · VulDB https://cve.new/CVE-2026-122051

    0000040
    393 followersView on X
  • DailyCVE@dailycve

    🔴 Edimax BR-6208AC, Command Injection, #CVE-2026-122051 (Critical) -DC-Nov2026-4186 https://dailycve.com/edimax-br-6208ac-command-injection-cve-2026-122051-critical-dc-nov2026-4186/

    0000029
    253 followersView on X

Explore more