https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-1972.htmlhttps://patchthecve.com/cve/CVE-2026-1972.htmlWed, 17 Jun 2026 10:16:48 +0000MEDIUM 5.3: A vulnerability was found in Edimax BR-6208AC 2_1.02. The affected element is the function auth_check_userpass2. Performing a manipulation of the argument Username/Password results in use of default credentials. The attack may be initiated remotely. The exploit has been made public and could be usedhttps://patchthecve.com/cve/CVE-2025-70161.htmlhttps://patchthecve.com/cve/CVE-2025-70161.htmlWed, 17 Jun 2026 10:03:10 +0000CRITICAL 9.8: EDIMAX BR-6208AC V2_1.02 is vulnerable to Command Injection. This arises because the pppUserName field is directly passed to a shell command via the system() function without proper sanitization. An attacker can exploit this by injecting malicious commands into the pppUserName field, allowing arbitrhttps://patchthecve.com/cve/CVE-2025-15258.htmlhttps://patchthecve.com/cve/CVE-2025-15258.htmlWed, 17 Jun 2026 08:37:28 +0000LOW 3.5: A weakness has been identified in Edimax BR-6208AC 1.02/1.03. Affected by this issue is the function formALGSetup of the file /goform/formALGSetup of the component Web-based Configuration Interface. This manipulation of the argument wlan-url causes open redirect. The attack is possible to be carriedhttps://patchthecve.com/cve/CVE-2025-15257.htmlhttps://patchthecve.com/cve/CVE-2025-15257.htmlWed, 17 Jun 2026 08:37:28 +0000HIGH 7.3: A security flaw has been discovered in Edimax BR-6208AC 1.02/1.03. Affected by this vulnerability is the function formRoute of the file /gogorm/formRoute of the component Web-based Configuration Interface. The manipulation of the argument strIp/strMask/strGateway results in command injection. The athttps://patchthecve.com/cve/CVE-2025-15256.htmlhttps://patchthecve.com/cve/CVE-2025-15256.htmlWed, 17 Jun 2026 08:37:28 +0000HIGH 7.3: A vulnerability was identified in Edimax BR-6208AC 1.02/1.03. Affected is the function formStaDrvSetup of the file /goform/formStaDrvSetup of the component Web-based Configuration Interface. The manipulation of the argument rootAPmac leads to command injection. Remote exploitation of the attack is phttps://patchthecve.com/cve/CVE-2025-14910.htmlhttps://patchthecve.com/cve/CVE-2025-14910.htmlWed, 17 Jun 2026 08:36:45 +0000MEDIUM 4.3: A vulnerability was detected in Edimax BR-6208AC 1.02. This impacts the function handle_retr of the component FTP Daemon Service. The manipulation results in path traversal. The attack may be launched remotely. The exploit is now public and may be used. Edimax confirms this issue: "This product is n