CVE-2026-32838CWE-319

Edimax GS-5008PL <= 1.00.54 Transmits Credentials Over Cleartext HTTP

High · published March 17, 2026

CVSS v4.0
8.7
EPSS
0%
Percentile
8.6
In the wild
Unconfirmed
What it is

Edimax GS-5008PL firmware version 1.00.54 and prior use cleartext HTTP for the web management interface without implementing TLS or SSL encryption. Attackers on the same network can intercept management traffic to capture administrator credentials and sensitive configuration data.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00194 · 8.6th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2026-03-17T21:42Z
EPSS history
Timeline
  • 17 MAR 21:42Z
    Edimax GS-5008PL <= 1.00.54 Transmits Credentials Over Cleartext HTTP
    cvelistv5