What is CVE-2026-32842?

CVE-2026-32842 is a medium-severity vulnerability in Edimax Gs-5008pl, classified under Cleartext Storage of Sensitive Information. CVSS score: 6.5/10. Published 2026-03-17.

How severe is CVE-2026-32842?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in Edimax Gs-5008pl

CVE-2026-32842

Edimax GS-5008PL firmware version 1.00.54 and prior contain an insecure credential storage vulnerability that allows attackers to obtain administrator credentials by accessing configuration backup files. Attackers can download the config.bin file through fupload.cgi to extract plaintext username and password fields for unauthorized administrative access.

EPSS: 0.002 (10.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Edimax Gs-5008pl
Edimax Gs-5008pl_firmware
Edimax Technology Co., Ltd. Gs-5008pl — versions 0

Weakness classification (CWE)

CWE-312 — Cleartext Storage of Sensitive Information

References

disclosure@vulncheck.com (Product, product)
disclosure@vulncheck.com (Product, product)
disclosure@vulncheck.com (Third Party Advisory, third-party-advisory)

Frequently asked questions

What is CVE-2026-32842?: CVE-2026-32842 is a medium-severity vulnerability in Edimax Gs-5008pl, classified under Cleartext Storage of Sensitive Information. CVSS score: 6.5/10. Published 2026-03-17.
How severe is CVE-2026-32842?: Medium severity. CVSS v3 base score is 6.5 out of 10.