CVE-2026-32842 Edimax GS-5008PL <= 1.00.54 Admin Credentials Stored in Cleartext
Attackers can download configuration backups to extract plaintext admin credentials, leading to unauthorized administrative access on Edimax switches.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-32842?
CVE-2026-32842 is a high-severity vulnerability in Edimax GS-5008PL, published on 17 Mar 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Edimax GS-5008PL firmware version 1.00.54 and prior contain an insecure credential storage vulnerability that allows attackers to obtain administrator credentials by accessing configuration backup files. Attackers can download the config.bin file through fupload.cgi to extract plaintext username and password fields for unauthorized administrative access.
Weakness: CWE-312
Which versions are affected by CVE-2026-32842?
It affects 1 product.
Products include Edimax Gs-5008pl Firmware.
How do I fix CVE-2026-32842?
No fix has been published for CVE-2026-32842 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-32842 being exploited?
There is no known exploitation of CVE-2026-32842 in the wild and no public exploit code.
Other vulnerabilities in Edimax GS-5008PL
- CVE-2026-32841 Edimax GS-5008PL <= 1.00.54 Global Authentication State Across All Clients
- CVE-2026-32838 Edimax GS-5008PL <= 1.00.54 Transmits Credentials Over Cleartext HTTP
- CVE-2026-32839 Edimax GS-5008PL <= 1.00.54 CSRF via Management CGI Endpoints
- CVE-2026-32840 Edimax GS-5008PL <= 1.00.54 Stored XSS via Device Name
Sources
Also known as GHSA-2f9j-ff2q-8qmx.