CVE-2026-1971 | Edimax BR-6288ACL up to 1.12 wiz_WISP24gmanual.asp wiz_WISP24gmanual manualssid cross site scripting

A vulnerability categorized as problematic has been discovered in Edimax BR-6288ACL up to 1.12. Impacted is the function wiz_WISP24gmanual of the file wiz_WISP24gmanual.asp. Such manipulation of the argument manualssid leads to cross site scripting. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is uniquely identified as CVE-2026-1971. The attack can be launched remotely. Moreover, an exploit is present.

The vendor confirms that the affected product is end-of-life. They confirm that they “will issue a consolidated Security Advisory on our official support website.”