Vulnerability · Published Mar 17, 2026 · Assigned by VulnCheck
CVE-2026-32842Edimax GS-5008PL <= 1.00.54 Admin Credentials Stored in Cleartext
Medium 6.5
In plain English
A medium-severity security flaw in Edimax GS-5008PL from EDIMAX Technology Co., Ltd.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 13% of all known vulnerabilities).
Official description
Edimax GS-5008PL firmware version 1.00.54 and prior contain an insecure credential storage vulnerability that allows attackers to obtain administrator credentials by accessing configuration backup files. Attackers can download the config.bin file through fupload.cgi to extract plaintext username and password fields for unauthorized administrative access.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| EDIMAX Technology Co., Ltd. | Edimax GS-5008PL | 0 – through 1.0.54 |
Weakness: CWE-312 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
References
- https://www.edimax.com/edimax/merchandise/merchandise_detail/data/edimax/us/smb_legacy_switches/gs-5008pl/ product
- https://www.edimax.com/edimax/merchandise/merchandise_list/data/edimax/us/smb_legacy_products/ product
- https://www.vulncheck.com/advisories/edimax-gs-5008pl-admin-credentials-stored-in-cleartext third-party-advisory