HarborGuard / CVE
Back to search
HIGHCVE-2026-32842Published Modified CNA VulnCheck

CVE-2026-32842: Edimax GS-5008PL <= 1.00.54 Admin Credentials Stored in Cleartext

Edimax GS-5008PL firmware version 1.00.54 and prior contain an insecure credential storage vulnerability that allows attackers to obtain administrator credentials by accessing configuration backup files. Attackers can download the config.bin file through fupload.cgi to extract plaintext username and password fields for unauthorized administrative access.

Metrics

CVSS v4.0
7.1
Severity
HIGH
Fixed in
—
Affected Products
1
Affected packages
  • EDIMAX Technology Co., Ltd. / Edimax GS-5008PL
    ≤ 1.0.54
CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
References