{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: Edimax vulnerabilities","home_page_url":"https://patchfirst.co/vendor/edimax/","feed_url":"https://patchfirst.co/feed/vendor/edimax.json","description":"New and newly exploited Edimax CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2026-108918","url":"https://patchfirst.co/cve/CVE-2026-108918/","title":"CVE-2026-108918: A vulnerability was identified in Edimax BR-6208AC 1.32","content_text":"Edimax · BR-6208AC. Not in CISA KEV. EPSS 2.0% (higher than 81% of CVEs). CVSS 10.0 CRITICAL. Priority 25.4 of 100.","summary":"A vulnerability was identified in Edimax BR-6208AC 1.32","date_published":"2026-10-12T00:00:00.000Z","date_modified":"2026-10-15T14:17:16.000Z","tags":[],"_patchfirst":{"reason":"published","priority":25.4,"kev":null,"epss":{"score":0.02028,"percentile":0.80998},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"Edimax","product":"BR-6208AC","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-108917","url":"https://patchfirst.co/cve/CVE-2026-108917/","title":"CVE-2026-108917: A vulnerability was determined in Edimax BR-6208AC 1.32","content_text":"Edimax · BR-6208AC. Not in CISA KEV. EPSS 2.0% (higher than 80.6% of CVEs). CVSS 10.0 CRITICAL. Priority 25.3 of 100.","summary":"A vulnerability was determined in Edimax BR-6208AC 1.32","date_published":"2026-10-12T00:00:00.000Z","date_modified":"2026-10-13T17:17:22.000Z","tags":[],"_patchfirst":{"reason":"published","priority":25.3,"kev":null,"epss":{"score":0.01989,"percentile":0.80614},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"Edimax","product":"BR-6208AC","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-108914","url":"https://patchfirst.co/cve/CVE-2026-108914/","title":"CVE-2026-108914: A flaw has been found in Edimax BR-6208AC 1.32","content_text":"Edimax · BR-6208AC. Not in CISA KEV. EPSS 0.6% (higher than 47% of CVEs). CVSS 9.9 CRITICAL. Priority 18.5 of 100.","summary":"A flaw has been found in Edimax BR-6208AC 1.32","date_published":"2026-10-12T00:00:00.000Z","date_modified":"2026-10-15T14:17:15.000Z","tags":[],"_patchfirst":{"reason":"published","priority":18.5,"kev":null,"epss":{"score":0.00567,"percentile":0.47025},"cvss":{"score":9.9,"severity":"CRITICAL","version":"3.1"},"vendor":"Edimax","product":"BR-6208AC","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-108915","url":"https://patchfirst.co/cve/CVE-2026-108915/","title":"CVE-2026-108915: A vulnerability has been found in Edimax BR-6208AC 1.32","content_text":"Edimax · BR-6208AC. Not in CISA KEV. EPSS 0.4% (higher than 38.7% of CVEs). CVSS 9.9 CRITICAL. Priority 16.8 of 100.","summary":"A vulnerability has been found in Edimax BR-6208AC 1.32","date_published":"2026-10-12T00:00:00.000Z","date_modified":"2026-10-13T17:17:22.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.8,"kev":null,"epss":{"score":0.00445,"percentile":0.38746},"cvss":{"score":9.9,"severity":"CRITICAL","version":"3.1"},"vendor":"Edimax","product":"BR-6208AC","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2025-34024","url":"https://patchfirst.co/cve/CVE-2025-34024/","title":"CVE-2025-34024: Edimax EW-7438RPn Mini OS Command Injection via mp.asp","content_text":"Edimax · Edimax EW-7438RPn Mini. Not in CISA KEV. EPSS 3.9% (higher than 90.2% of CVEs). CVSS 9.4 CRITICAL. Public exploit code exists. Priority 64.6 of 100.","summary":"Edimax EW-7438RPn Mini OS Command Injection via mp.asp","date_published":"2025-06-20T00:00:00.000Z","date_modified":"2026-05-14T02:07:22.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":64.6,"kev":null,"epss":{"score":0.039,"percentile":0.90249},"cvss":{"score":9.4,"severity":"CRITICAL","version":"4.0"},"vendor":"Edimax","product":"Edimax EW-7438RPn Mini","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2025-34029","url":"https://patchfirst.co/cve/CVE-2025-34029/","title":"CVE-2025-34029: Edimax EW-7438RPn Mini OS Command Injection via syscmd.asp","content_text":"Edimax · Edimax EW-7438RPn Mini. Not in CISA KEV. EPSS 3.5% (higher than 89.2% of CVEs). CVSS 9.4 CRITICAL. Public exploit code exists. Priority 64.4 of 100.","summary":"Edimax EW-7438RPn Mini OS Command Injection via syscmd.asp","date_published":"2025-06-20T00:00:00.000Z","date_modified":"2026-05-14T02:07:23.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":64.4,"kev":null,"epss":{"score":0.03507,"percentile":0.89176},"cvss":{"score":9.4,"severity":"CRITICAL","version":"4.0"},"vendor":"Edimax","product":"Edimax EW-7438RPn Mini","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2025-1316#kev","url":"https://patchfirst.co/cve/CVE-2025-1316/","title":"[KEV] CVE-2025-1316: Edimax IC-7100 IP Camera OS Command Injection Vulnerability","content_text":"Edimax · IC-7100 IP Camera. In CISA KEV since 2025-03-19. ENISA EUVD lists it as exploited. EPSS 74.5% (higher than 99.49% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1055 Process Injection. Priority 64.8 of 100.","summary":"Edimax IC-7100 IP Camera OS Command Injection Vulnerability","date_published":"2025-03-19T00:00:00.000Z","date_modified":"2026-06-17T08:38:54.000Z","tags":["kev","T1190","T1055"],"_patchfirst":{"reason":"kev","priority":64.8,"kev":{"dateAdded":"2025-03-19","ransomware":false},"epss":{"score":0.74482,"percentile":0.99494},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Edimax","product":"IC-7100 IP Camera","techniqueIds":["T1190","T1055"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}}]}