PatchTheCVECVE-2026-1972: A vulnerability was found in Edimax BR-6208AC 2_1.02
CVE-2026-1972 is a medium-severity flaw (CVSS 5.3) affecting br-6208ac firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
A vulnerability was found in Edimax BR-6208AC 2_1.02. The affected element is the function auth_check_userpass2. Performing a manipulation of the argument Username/Password results in use of default credentials. The attack may be initiated remotely. The exploit has been made public and could be used. The vendor confirms that the affected product is end-of-life. They confirm that they "will issue a consolidated Security Advisory on our official su
Why this priority
- Public exploit reference
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Risk facts
| CVSS score | 5.3 (Medium) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 0.7% (top 48%) |
| CISA exploited list | No |
| Weakness | CWE-1392 |
| Published | 2026-02-06 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2026-1972?
br-6208ac firmware: upgrade to newer than 1.02. Exact commands for each OS are on this page.
Is CVE-2026-1972 being exploited?
CVE-2026-1972 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2026-1972 affect?
CVE-2026-1972 affects br-6208ac firmware. Severity is medium (CVSS 5.3). A vulnerability was found in Edimax BR-6208AC 2_1.02. The affected element is the function auth_check_userpass2. Performing a manipulation of the argument Username/Password results in use of default credentials. The attack may be initiated
How urgent is CVE-2026-1972?
Priority 42/100. Public exploit reference; Remotely exploitable, no login, no user action
Related CVEs
- CVE-2025-70161 CRITICAL 9.8 MITIGATE EDIMAX BR-6208AC V2_1.02 is vulnerable to Command Injection
- CVE-2025-15258 LOW 3.5 MITIGATE A weakness has been identified in Edimax BR-6208AC 1.02/1.03
- CVE-2025-15257 HIGH 7.3 MITIGATE A security flaw has been discovered in Edimax BR-6208AC 1.02/1.03
- CVE-2025-15256 HIGH 7.3 MITIGATE A vulnerability was identified in Edimax BR-6208AC 1.02/1.03
- CVE-2025-14910 MEDIUM 4.3 MITIGATE A vulnerability was detected in Edimax BR-6208AC 1.02