PT-2026-25944 · Edimax · Edimax Gs-5008Pl

Kazuma Matsumoto · CVE-2026-32838 · Published 2026-03-17 · Updated 2026-03-18

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Edimax GS-5008PL firmware versions 1.00.54 and earlier

Description The web management interface uses unencrypted HTTP, lacking TLS or SSL encryption. Attackers on the same network can intercept management traffic, potentially capturing administrator credentials and sensitive configuration data.

Recommendations Update to a version that implements TLS or SSL encryption for the web management interface.

Fix

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

BDU:2026-03526

CVE-2026-32838

Affected Products

Edimax Gs-5008Pl

References · 7

• https://bdu.fstec.ru/vul/2026-03526 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-32838 · Security Note
• https://edimax.com/edimax/merchandise/merchandise_detail/data/edimax/us/smb_legacy_switches/gs-5008pl · Note
• https://vulncheck.com/advisories/edimax-gs-5008pl-transmits-credentials-over-cleartext-http · Note
• https://vulncheck.com/advisories/edimax-gs-5008pl-transmits-credentials-over-cleartext · Note
• https://twitter.com/CVEnew/status/2034136464888381701 · Twitter Post
• https://edimax.com/edimax/merchandise/merchandise_list/data/edimax/us/smb_legacy_products · Note