CVE-2026-32839 MEDIUM

CVE-2026-32839: Edimax GS-5008PL <= 1.00.54 CSRF via Management CGI Endpoints

Vendor Edimax Technology Co., Ltd.
Product Edimax GS-5008PL
Weakness CWE-352 · CSRF
Published March 17, 2026
Last update May 8, 2026
View on NVD All CVEs

CVSS base score

5.1/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Edimax GS-5008PL firmware version 1.00.54 and prior contain a cross-site request forgery vulnerability that allows remote attackers to perform unauthorized administrative actions by inducing logged-in administrators to visit malicious pages. Attackers can exploit the lack of anti-CSRF tokens and request validation to change passwords, upload firmware, reboot the device, perform factory resets, or modify network configurations.

Key dates

02Disclosure timeline

March 17, 2026 CVE published
May 8, 2026 Record updated