Which versions of Edimax Gs 5008pl are affected by CVE-2026-32841?

Edimax GS-5008PL network switches running firmware 1.00.54 or earlier are vulnerable to authentication bypass, allowing any attacker with network access to gain administrative control after a single…

How to fix or mitigate CVE-2026-32841?

Within 24 hours: Identify all affected GS-5008PL switches in production and document their network locations and current firmware versions. Within 7 days: Implement network segmentation to restrict management interface access to administrative VLANs only, disable remote management if not required, and enforce strong monitoring of management port activity (ports 80/443/22). Within 30 days: Contact Edimax for patch availability updates and develop a firmware update plan; if no patch is released, evaluate switch replacement or maintain strict air-gap controls on affected devices.

Edimax Gs 5008pl CVE-2026-32841

Q: What is the CVSS score of CVE-2026-32841?

CVE-2026-32841 has a CVSS 4.0 base score of 9.2 (Critical). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

EUVD-2026-12653 CRITICAL

Excessive Reliance on Global Variables (CWE-1108)

2026-03-17 VulnCheck

Authentication Bypass Edimax Gs 5008pl

9.2

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

9.2 CRITICAL

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Re-analysis Queued

May 26, 2026 - 14:22 vuln.today

cvss_changed

Severity Changed

May 26, 2026 - 14:22 NVD

HIGH CRITICAL

CVSS changed

May 26, 2026 - 14:22 NVD

8.1 (HIGH) 9.2 (CRITICAL)

EUVD ID Assigned

Mar 17, 2026 - 22:00 euvd

EUVD-2026-12653

Analysis Generated

Mar 17, 2026 - 22:00 vuln.today

CVE Published

Mar 17, 2026 - 21:41 nvd

HIGH 8.1

DescriptionCVE.org

Edimax GS-5008PL firmware version 1.00.54 and prior contain an authentication bypass vulnerability that allows unauthenticated attackers to access the management interface. Attackers can exploit the global authentication flag mechanism to gain administrative access without credentials after any user authenticates, enabling unauthorized password changes, firmware uploads, and configuration modifications.

AnalysisAI

Edimax GS-5008PL switches running firmware 1.00.54 and earlier contain an authentication bypass in the management interface that allows unauthenticated remote attackers to gain administrative access by exploiting a flawed global authentication flag mechanism. Once bypassed, attackers can modify administrator credentials, upload malicious firmware, and alter device configurations without any authentication required. No patch is currently available for this high-severity vulnerability.

Technical ContextAI

An authentication bypass vulnerability allows attackers to circumvent login mechanisms and gain unauthorized access without valid credentials.

RemediationAI

Implement robust authentication mechanisms. Use multi-factor authentication. Review authentication logic for bypass conditions. Remove default credentials.