Vulnerability · Published Mar 17, 2026 · Assigned by VulnCheck
CVE-2026-32841Edimax GS-5008PL <= 1.00.54 Global Authentication State Across All Clients
High 8.1
In plain English
A high-severity security flaw in Edimax GS-5008PL from EDIMAX Technology Co., Ltd.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 50% of all known vulnerabilities).
Official description
Edimax GS-5008PL firmware versions 1.00.54 and prior contain an authentication bypass vulnerability that allows unauthenticated attackers to access the management interface. Attackers can exploit the global authentication flag mechanism to gain administrative access without credentials after any user authenticates, enabling unauthorized password changes, firmware uploads, and configuration modifications.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| EDIMAX Technology Co., Ltd. | Edimax GS-5008PL | 0 – through 1.0.54 |
Weakness: CWE-1108 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
References
- https://www.edimax.com/edimax/merchandise/merchandise_detail/data/edimax/us/smb_legacy_switches/gs-5008pl/ product
- https://www.edimax.com/edimax/merchandise/merchandise_list/data/edimax/us/smb_legacy_products/ product
- https://www.vulncheck.com/advisories/edimax-gs-5008pl-global-authentication-state-across-all-clients third-party-advisory