Vulnerability Instance

HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/77043?format=api",
    "vulnerability_id": "VCID-nt37-zd1q-ryds",
    "summary": "Edimax GS-5008PL firmware versions 1.00.54 and prior contain an authentication bypass vulnerability that allows unauthenticated attackers to access the management interface. Attackers can exploit the global authentication flag mechanism to gain administrative access without credentials after any user authenticates, enabling unauthorized password changes, firmware uploads, and configuration modifications.",
    "aliases": [
        {
            "alias": "CVE-2026-32841"
        }
    ],
    "fixed_packages": [],
    "affected_packages": [],
    "references": [
        {
            "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-32841",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "0.00067",
                    "scoring_system": "epss",
                    "scoring_elements": "0.20844",
                    "published_at": "2026-06-11T12:55:00Z"
                },
                {
                    "value": "0.00067",
                    "scoring_system": "epss",
                    "scoring_elements": "0.21039",
                    "published_at": "2026-06-13T12:55:00Z"
                },
                {
                    "value": "0.00067",
                    "scoring_system": "epss",
                    "scoring_elements": "0.2102",
                    "published_at": "2026-06-14T12:55:00Z"
                }
            ],
            "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-32841"
        },
        {
            "reference_url": "https://www.vulncheck.com/advisories/edimax-gs-5008pl-global-authentication-state-across-all-clients",
            "reference_id": "edimax-gs-5008pl-global-authentication-state-across-all-clients",
            "reference_type": "",
            "scores": [
                {
                    "value": "8.1",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
                },
                {
                    "value": "9.2",
                    "scoring_system": "cvssv4",
                    "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
                },
                {
                    "value": "Track",
                    "scoring_system": "ssvc",
                    "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-03-18T19:58:19Z/"
                }
            ],
            "url": "https://www.vulncheck.com/advisories/edimax-gs-5008pl-global-authentication-state-across-all-clients"
        },
        {
            "reference_url": "https://www.edimax.com/edimax/merchandise/merchandise_detail/data/edimax/us/smb_legacy_switches/gs-5008pl/",
            "reference_id": "gs-5008pl",
            "reference_type": "",
            "scores": [
                {
                    "value": "8.1",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
                },
                {
                    "value": "9.2",
                    "scoring_system": "cvssv4",
                    "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
                },
                {
                    "value": "Track",
                    "scoring_system": "ssvc",
                    "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-03-18T19:58:19Z/"
                }
            ],
            "url": "https://www.edimax.com/edimax/merchandise/merchandise_detail/data/edimax/us/smb_legacy_switches/gs-5008pl/"
        },
        {
            "reference_url": "https://www.edimax.com/edimax/merchandise/merchandise_list/data/edimax/us/smb_legacy_products/",
            "reference_id": "smb_legacy_products",
            "reference_type": "",
            "scores": [
                {
                    "value": "8.1",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
                },
                {
                    "value": "9.2",
                    "scoring_system": "cvssv4",
                    "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
                },
                {
                    "value": "Track",
                    "scoring_system": "ssvc",
                    "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-03-18T19:58:19Z/"
                }
            ],
            "url": "https://www.edimax.com/edimax/merchandise/merchandise_list/data/edimax/us/smb_legacy_products/"
        }
    ],
    "weaknesses": [
        {
            "cwe_id": 1108,
            "name": "Excessive Reliance on Global Variables",
            "description": "The code is structured in a way that relies too much on using or setting global variables throughout various points in the code, instead of preserving the associated information in a narrower, more local context."
        }
    ],
    "exploits": [],
    "severity_range_score": "8.1 - 9.2",
    "exploitability": null,
    "weighted_severity": null,
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-nt37-zd1q-ryds"
}