Vulnerability · Published Mar 17, 2026 · Assigned by VulnCheck
CVE-2026-32838Edimax GS-5008PL <= 1.00.54 Transmits Credentials Over Cleartext HTTP
High 7.5
In plain English
A high-severity security flaw in Edimax GS-5008PL from EDIMAX Technology Co., Ltd.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 4% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.1%top 96.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Edimax GS-5008PL firmware version 1.00.54 and prior use cleartext HTTP for the web management interface without implementing TLS or SSL encryption. Attackers on the same network can intercept management traffic to capture administrator credentials and sensitive configuration data.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| EDIMAX Technology Co., Ltd. | Edimax GS-5008PL | 0 – through 1.0.54 |
Weakness: CWE-319 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
References
- https://www.edimax.com/edimax/merchandise/merchandise_detail/data/edimax/us/smb_legacy_switches/gs-5008pl/ product
- https://www.edimax.com/edimax/merchandise/merchandise_list/data/edimax/us/smb_legacy_products/ product
- https://www.vulncheck.com/advisories/edimax-gs-5008pl-transmits-credentials-over-cleartext-http third-party-advisory