Advisories · Technology

EDIMAX Technology Co., Ltd. Edimax GS-5008PL.

Every CVE that names EDIMAX Technology Co., Ltd. Edimax GS-5008PL among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-32838 CVE record

CVSS 8.7 High

Edimax GS-5008PL <= 1.00.54 Transmits Credentials Over Cleartext HTTP
- EDIMAX Technology Co., Ltd. Edimax GS-5008PL
- Weak cryptography or TLS
Not analysed yet 17 Mar 2026
CVE-2026-32839 CVE record

CVSS 5.1 Medium

Edimax GS-5008PL <= 1.00.54 CSRF via Management CGI Endpoints
- EDIMAX Technology Co., Ltd. Edimax GS-5008PL
- Cross-site request forgery (CSRF)
Not analysed yet 17 Mar 2026
CVE-2026-32840 CVE record

CVSS 5.1 Medium

Edimax GS-5008PL <= 1.00.54 Stored XSS via Device Name
- EDIMAX Technology Co., Ltd. Edimax GS-5008PL
- Cross-site scripting (XSS)
Not analysed yet 17 Mar 2026
CVE-2026-32842 CVE record

CVSS 7.1 High

Edimax GS-5008PL <= 1.00.54 Admin Credentials Stored in Cleartext
- EDIMAX Technology Co., Ltd. Edimax GS-5008PL
- Information disclosure
Not analysed yet 17 Mar 2026
CVE-2026-32841 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+

Edimax GS-5008PL <= 1.00.54 Global Authentication State Across All Clients
- EDIMAX Technology Co., Ltd. Edimax GS-5008PL
- CWE-1108
Not analysed yet 17 Mar 2026