CVE-2026-32842CWE-312

Edimax GS-5008PL <= 1.00.54 Admin Credentials Stored in Cleartext

High · published March 17, 2026

CVSS v4.0
7.1
EPSS
0%
Percentile
20.4
In the wild
Unconfirmed
What it is

Edimax GS-5008PL firmware version 1.00.54 and prior contain an insecure credential storage vulnerability that allows attackers to obtain administrator credentials by accessing configuration backup files. Attackers can download the config.bin file through fupload.cgi to extract plaintext username and password fields for unauthorized administrative access.

The record
Technical detail
CVSS v4.0
7.1 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00290 · 20.4th percentile
Weakness
CWE-312 · Cleartext Storage of Sensitive Information
Published
2026-03-17T21:41Z
EPSS history
Timeline
  • 17 MAR 21:41Z
    Edimax GS-5008PL <= 1.00.54 Admin Credentials Stored in Cleartext
    cvelistv5