CVE-2026-32841
Edimax Gs-5008Pl Firmware ≤ 1.00.54
Raw vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XSummary
CVE-2026-32841 is a critical-severity Excessive Reliance on Global Variables (CWE-1108) vulnerability in Edimax Gs-5008Pl Firmware. Its CVSS base score is 9.2 (Critical).
Operationally, ranked at the 45th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified map to SA-15 (Development Process, Standards, and Tools) and SA-17 (Developer Security and Privacy Architecture and Design) — see the control section below for these in your framework.
Deeper analysis AI-assisted summary
Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.
CVE-2026-32841 is an authentication bypass vulnerability (CWE-1108) in Edimax GS-5008PL firmware version 1.00.54 and prior. The flaw arises from a global authentication flag mechanism in the management interface, which fails to properly isolate authentication states across sessions.
Unauthenticated network attackers can exploit the vulnerability after any legitimate user authenticates to the management interface. This allows them to bypass credentials and gain administrative access, enabling unauthorized password changes, firmware uploads, and configuration modifications. The CVSS v3.1 base score is 8.1 (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H), reflecting high attack complexity likely due to the need for a prior user authentication.
Mitigation guidance is available in vendor resources and advisories, including the Edimax GS-5008PL product page at https://www.edimax.com/edimax/merchandise/merchandise_detail/data/edimax/us/smb_legacy_switches/gs-5008pl/, the Edimax SMB legacy products list at https://www.edimax.com/edimax/merchandise/merchandise_list/data/edimax/us/smb_legacy_products/, and the VulnCheck advisory at https://www.vulncheck.com/advisories/edimax-gs-5008pl-global-authentication-state-across-all-clients. The CVE was published on 2026-03-17.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2026-12653
Vulnerability Data
Edimax GS-5008PL firmware versions 1.00.54 and prior contain an authentication bypass vulnerability that allows unauthenticated attackers to access the management interface. Attackers can exploit the global authentication flag mechanism to gain administrative access without credentials after any user authenticates, enabling…
more
unauthorized password changes, firmware uploads, and configuration modifications.
- CWE(s)
Related Threats
CVEs Like This One
Affected Assets
Mitigating Controls
Control response
—
—
—
V3.2.3V15.3.6
Mitigating Controls (NIST 800-53 r5) AI
Requiring documented development standards and secure design processes prevents introduction of global-variable-heavy architectures.
Requiring developers to produce security architecture descriptions enforces designs that avoid broad global coupling.
Security engineering principles explicitly require encapsulation, modularity, and minimized shared state, directly stopping excessive global use.
Mitigating Controls (NIST CSF 2.0) AI
Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.
Secure SDLC practices directly enforce coding standards that avoid excessive globals.
Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI
Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.
Secure SDLC practices discourage global state by enforcing modular design and encapsulation.
Secure architecture principles promote limited scope and explicit interfaces over global variables.
Secure coding standards explicitly ban or restrict global variables to reduce coupling and side-effects.