What is the CVSS score of CVE-2026-32838?

CVE-2026-32838 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.0%.

Which versions of Edimax Gs 5008pl are affected by CVE-2026-32838?

Edimax GS-5008PL network switches transmit administrator credentials over unencrypted HTTP, allowing attackers with network access to capture sensitive management credentials and configuration data.

How to fix or mitigate CVE-2026-32838?

Within 24 hours: Inventory all Edimax GS-5008PL devices in production and document their network locations and management access patterns. Within 7 days: Implement network segmentation to restrict management traffic to isolated VLANs accessible only to authorized administrators, and disable remote web management if not operationally required. Within 30 days: Evaluate replacement with switches supporting encrypted management protocols (HTTPS/SSH), or contact Edimax for patch availability and timeline; establish a vendor communication plan for security updates.

Edimax Gs 5008pl CVE-2026-32838

EUVD-2026-12647 HIGH

Cleartext Transmission of Sensitive Information (CWE-319)

2026-03-17 VulnCheck

Information Disclosure Edimax Gs 5008pl

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

EUVD ID Assigned

Mar 17, 2026 - 22:00 euvd

EUVD-2026-12647

Analysis Generated

Mar 17, 2026 - 22:00 vuln.today

CVE Published

Mar 17, 2026 - 21:42 nvd

HIGH 7.5

DescriptionCVE.org

Edimax GS-5008PL firmware version 1.00.54 and prior use cleartext HTTP for the web management interface without implementing TLS or SSL encryption. Attackers on the same network can intercept management traffic to capture administrator credentials and sensitive configuration data.