CVE-2026-122051: Edimax BR-6208AC command injection

CVE-2026-122051 is a command injection vulnerability in the Edimax BR-6208AC router version 1.32. The flaw exists in an unknown functionality of the /goform/mp file, allowing a remote attacker to execute system commands on the device without authentication. The Edimax router is widely deployed in corporate and home networks, potentially affecting a significant number of installations.

The vulnerability has a CVSS score of 10.0, the maximum on the scale, classified as critical. Status is confirmed: an exploit has already been published, and vendor Edimax was contacted but did not respond or confirm patch availability. Social media signals (2 posts in the last 24 hours) confirm circulation of the disclosure in the security community.

System administrators must immediately implement a multi-layered defensive strategy: verify if the Edimax BR-6208AC model is present in corporate inventory, isolate vulnerable devices from sensitive networks, monitor traffic toward /goform/mp endpoint, and disable unnecessary functionalities. Contact the vendor to verify firmware update availability or, if absent, plan device replacement. In the meantime, restrict remote access to the router via perimeter firewall.