CVE-2026-32838 Edimax GS-5008PL <= 1.00.54 Transmits Credentials Over Cleartext HTTP
Attackers on the same network can intercept cleartext HTTP traffic to capture administrator credentials and sensitive configuration data from Edimax GS-5008PL switches.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-32838?
CVE-2026-32838 is a high-severity vulnerability in Edimax GS-5008PL, published on 17 Mar 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Edimax GS-5008PL firmware version 1.00.54 and prior use cleartext HTTP for the web management interface without implementing TLS or SSL encryption. Attackers on the same network can intercept management traffic to capture administrator credentials and sensitive configuration data.
Weakness: CWE-319
Which versions are affected by CVE-2026-32838?
It affects 1 product.
Products include Edimax Gs-5008pl Firmware.
How do I fix CVE-2026-32838?
No fix has been published for CVE-2026-32838 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-32838 being exploited?
There is no known exploitation of CVE-2026-32838 in the wild and no public exploit code.
Other vulnerabilities in Edimax GS-5008PL
- CVE-2026-32841 Edimax GS-5008PL <= 1.00.54 Global Authentication State Across All Clients
- CVE-2026-32842 Edimax GS-5008PL <= 1.00.54 Admin Credentials Stored in Cleartext
- CVE-2026-32839 Edimax GS-5008PL <= 1.00.54 CSRF via Management CGI Endpoints
- CVE-2026-32840 Edimax GS-5008PL <= 1.00.54 Stored XSS via Device Name
Sources
Also known as GHSA-9539-rgx7-2v38.