CVE-2026-32842 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Edimax GS-5008PL firmware version 1.00.54 and prior contain an insecure credential storage vulnerability that allows attackers to obtain administrator credentia…
High CVSS: 7.1

CVE-2026-32842

Edimax GS-5008PL firmware version 1.00.54 and prior contain an insecure credential storage vulnerability that allows attackers to obtain administrator credentials by accessing configuration backup files. Attackers can download the config.bin file through fupload.cgi to extract plaintext username and password fields for unauthorized administrative access.
Vendor
Edimax
Product
Gs-5008pl Firmware
CWE
CWE-312
Yayın Tarihi
2026-03-17 22:16:15
Güncelleme
2026-03-19 13:54:05
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-312 Gs-5008pl Firmware HIGH Edimax 2026

Referanslar

https://www.edimax.com/edimax/merchandise/merchandise_detail/data/edimax/us/smb_legacy_switches/gs-5008pl/ https://www.edimax.com/edimax/merchandise/merchandise_list/data/edimax/us/smb_legacy_products/ https://www.vulncheck.com/advisories/edimax-gs-5008pl-admin-credentials-stored-in-cleartext