Vulnerability Description
Edimax GS-5008PL firmware version 1.00.54 and prior contain an authentication bypass vulnerability that allows unauthenticated attackers to access the management interface. Attackers can exploit the global authentication flag mechanism to gain administrative access without credentials after any user authenticates, enabling unauthorized password changes, firmware uploads, and configuration modifications.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Edimax | Gs-5008Pl Firmware | <= 1.00.54 |
| Edimax | Gs-5008Pl | - |
Related Weaknesses (CWE)
References
- https://www.edimax.com/edimax/merchandise/merchandise_detail/data/edimax/us/smb_Product
- https://www.edimax.com/edimax/merchandise/merchandise_list/data/edimax/us/smb_leProduct
- https://www.vulncheck.com/advisories/edimax-gs-5008pl-global-authentication-statThird Party Advisory
FAQ
What is CVE-2026-32841?
CVE-2026-32841 is a vulnerability with a CVSS score of 8.1 (HIGH). Edimax GS-5008PL firmware version 1.00.54 and prior contain an authentication bypass vulnerability that allows unauthenticated attackers to access the management interface. Attackers can exploit the g...
How severe is CVE-2026-32841?
CVE-2026-32841 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-32841?
Check the references section above for vendor advisories and patch information. Affected products include: Edimax Gs-5008Pl Firmware, Edimax Gs-5008Pl.