CVE-2026-9380

A security vulnerability has been detected in Edimax BR-6675nD 1.12. Affected is the function formL2TPSetup of the file /goform/formL2TPSetup of the component POST Request Handler. Such manipulation of the argument L2TPUserName leads to buffer overflow. The attack can be launched remotely. The...

formWlbasic() Arbitrary Command Execution

The vulnerability of the formWlbasic function in the /goform/formWlbasic microprogramming system for Edimax BR-6428NS routers is related to the lack of data cleaning measures at the control level when processing the repeaterSSID parameter. Exploiting this vulnerability allows an attacker to execu...

Edimax BR-6675nD formWlanMP Arbitrary Command Execution

The vulnerability of the formWlanMP function in the /goform/formWlanMP file of the Edimax BR-6675nD router’s microprogramming system is related to the lack of data cleaning measures at the management level when processing parameters such as ateFunc, ateGain, ateRate, ateChan, ateTxCount,...

Edimax BR-6675nD FormWlSiteSurvey Code Execution

The vulnerability of the formWlSiteSurvey function in the /goform/formWlSiteSurvey file of the Edimax BR-6675nD router’s microprogramming system is related to the issue where the operation’s output goes beyond the buffer in memory when processing the selSSID parameter. Exploiting this vulnerabili...

Edimax BR-6675nD formAccept() Arbitrary Command Execution

The vulnerability of the formAccept function in the /goform/formAccep file of the Edimax BR-6675nD router microprogramming software is related to the lack of data cleaning at the control level when processing the submit-url parameter. Exploiting this vulnerability allows an attacker to send...

mp() function arbitrary command execution

The vulnerability of the mp function in the /goform/mp microprogramming system for Edimax BR-6675nD routers is related to the lack of data cleaning at the control level when processing the command parameter. Exploiting this vulnerability allows an attacker to execute arbitrary commands by sending...

Edimax BR-6675nD USB Storage Command Execution

The vulnerability of the formUSBStorage function in the /goform/formUSBStorage file of the Edimax BR-6675nD router’s microprogramming system is related to the lack of data cleaning at the control level when processing the subdir parameter. Exploiting this vulnerability allows an attacker to execu...

Edimax BR-6675nD Router Code Execution

The vulnerability of the formWanTcpipSetup function in the /goform/formWanTcpipSetup file of the Edimax BR-6675nD router microprogramming software is related to the issue of the operation exceeding the buffer boundaries in memory when processing the pppUserName parameter. Exploiting this...

Edimax BR-6675nD formsetPPPoE Code Execution

The vulnerability of the formsetPPPoE function in the /goform/formsetPPPoE file of the Edimax BR-6675nD router microprogramming software is related to the issue of the operation exceeding the buffer in memory when processing the pppUserName parameter. Exploiting this vulnerability allows an...

CVE-2026-9480

A vulnerability was detected in Edimax EW-7438RPn 1.31. The impacted element is the function formrefresh of the file /goform/formrefresh. The manipulation of the argument submit-url results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public and...

EUVD-2026-31714

A vulnerability has been found in Edimax EW-7438RPn 1.31. This impacts the function formSDHCP of the file /goform/formSDHCP. Such manipulation of the argument submit-url leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may...

CVE-2026-9480

Edimax EW-7438RPn (firmware 1.31) is affected by a stack-based overflow in the formrefresh function within /goform/formrefresh. The vulnerability stems from manipulating the submit-url argument, enabling a remote attacker to overflow the stack. The advisory notes that the exploit is public and th...

CVE-2026-9479

A security vulnerability has been detected in Edimax EW-7438RPn 1.31. The affected element is the function formLogout of the file /goform/formLogout. The manipulation of the argument submit-url leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has...

CVE-2026-9463

Edimax EW-7438RPn (firmware 1.31) is affected by a stack-based overflow in the formLicence function (/goform/formLicence). The input submission is manipulated to trigger overflow, enabling a remote attack. Exploit code has been published. Vendor contact did not yield a response. The provided mate...

CVE-2026-9462

A vulnerability was detected in Edimax EW-7438RPn 1.31. Affected by this vulnerability is the function formWpsProxyEnable of the file /goform/formWpsProxyEnable. The manipulation of the argument submit-url results in stack-based buffer overflow. The attack can be launched remotely. The exploit is...

EUVD-2026-31682

A vulnerability was detected in Edimax EW-7438RPn 1.31. Affected by this vulnerability is the function formWpsProxyEnable of the file /goform/formWpsProxyEnable. The manipulation of the argument submit-url results in stack-based buffer overflow. The attack can be launched remotely. The exploit is...

CVE-2026-9459

CVE-2026-9459 affects Edimax EW-7438RPn (v1.31). The vulnerability lies in the formConnectionSetting function (/goform/formConnectionSetting); manipulating max_Conn/timeOut triggers a stack-based buffer overflow. It can be exploited remotely, with exploit activity publicly available and a PROOF-O...

CVE-2026-9443 Edimax BR-6478AC POST Request formL2TPSetup buffer overflow

A security vulnerability has been detected in Edimax BR-6478AC 1.23. This vulnerability affects the function formL2TPSetup of the file /goform/formL2TPSetup of the component POST Request Handler. The manipulation of the argument L2TPUserName leads to buffer overflow. The attack may be initiated...

CVE-2026-9442

CVE-2026-9442 affects Edimax BR-6478AC devices running version 1.23, impacting the POST request handler function /goform/formiNICSiteSurvey. The vulnerability arises from a manipulation of the argument selSSID in formiNICSiteSurvey, leading to a buffer overflow. Exploitation is described as remot...

CVE-2026-9442

A weakness has been identified in Edimax BR-6478AC 1.23. This affects the function formiNICSiteSurvey of the file /goform/formiNICSiteSurvey of the component POST Request Handler. Executing a manipulation of the argument selSSID can lead to buffer overflow. The attack can be launched remotely. Th...