Command injection vulnerability in Edimax BR-6208AC affects remote access

## Overview A critical vulnerability, CVE-2026-122051, has been identified in the Edimax BR-6208AC version 1.32. This flaw exists in an unknown functionality of the file /goform/mp. Attackers can exploit this vulnerability remotely, leading to potential command injection. ## Technical Details The vulnerability allows for manipulation of the /goform/mp file, which can be exploited to execute arbitrary commands on the device. The CVSS score of 9.3 indicates a high severity level, making this a significant risk for users of the affected product. The exploit code has been published, increasing the urgency for remediation. ## Impact Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to the device. This could lead to further attacks on the network or compromise sensitive information. Given the nature of the vulnerability, any organization using the Edimax BR-6208AC should prioritize addressing this issue. ## Mitigation Defenders should immediately check for firmware updates from Edimax. If a patch is available, it should be applied without delay. If no patch is currently available, organizations should consider isolating affected devices from the network to reduce exposure to potential attacks. Regular monitoring of network traffic for unusual activity is also recommended.