Stored Cross-Site Scripting in Edimax GS-5008PL Firmware
CVE-2026-32840

5.1MEDIUM

Key Information:

Vendor: Edimax Technology Co., Ltd.
Status: Edimax Gs-5008pl
Vendor: CVE Published:; 17 March 2026

🔔 Create Edimax Technology Co., Ltd. Vulnerability Alert

What is CVE-2026-32840?

The firmware of the Edimax GS-5008PL device exposes a stored cross-site scripting vulnerability due to improper handling of the sysName parameter in the system_name_set.cgi script. This vulnerability allows attackers to send crafted POST requests containing malicious script payloads that can be executed in the context of the administrator's session when viewing certain management pages, such as system_data.js. Exploiting this vulnerability can lead to unauthorized actions on the device, potentially compromising sensitive information.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch