CVE-2026-9442: Buffer Copy without Checking Size of Input

A weakness has been identified in Edimax BR-6478AC 1.23. This affects the function formiNICSiteSurvey of the file /goform/formiNICSiteSurvey of the component POST Request Handler. Executing a manipulation of the argument selSSID can lead to buffer overflow. The attack can be launched remotely. Th...

Edimax BR-6478AC 命令注入漏洞

Edimax BR-6478AC is a dual-band Gigabit router from China Xunzhou Edimax. Edimax BR-6478AC version 1.23 suffers from a command injection vulnerability, which originates from the operation of the function formiNICbasic in the file /goform/formiNICbasic in the POST Request Handler component, on the...

CVE-2026-9440: Improper Neutralization of Special Elements used in a Command

A vulnerability was identified in Edimax BR-6478AC 1.23. Affected by this vulnerability is the function formAccept of the file /goform/formAccept of the component POST Request Handler. Such manipulation of the argument submit-url leads to command injection. It is possible to launch the attack...

CVE-2026-9441: Improper Neutralization of Special Elements used in a Command

A security flaw has been discovered in Edimax BR-6478AC 1.23. Affected by this issue is the function formiNICbasic of the file /goform/formiNICbasic of the component POST Request Handler. Performing a manipulation of the argument rootAPmac results in command injection. The attack can be initiated...

Edimax BR-6478AC 安全漏洞

Edimax BR-6478AC is a dual-band Gigabit router from China Xunzhou Edimax. A security vulnerability exists in Edimax BR-6478AC version 1.23, which originates from the operation of the function formiNICSiteSurvey in the file /goform/formiNICSiteSurvey in the POST Request Handler...

The vulnerability of the formwlencrypt24g function in the goform/formwlencrypt24g file of the POST Request Handler component of the microprogramming system for wireless signal amplifiers of the Edimax EW-7438RPn Mini device, which allows a hacker to cause a service failure.

The vulnerability of the formwlencrypt24g function in the goform/formwlencrypt24g file of the POST Request Handler component of the microprogramming system for wireless signal amplifiers from Edimax EW-7438RPn Mini is related to the execution of an operation outside the buffer in memory when...

The vulnerability of the formWirelessTbl function in the goform/formWirelessTbl file of the POST Request Handler component of the Edimax BR-6428NS wireless signal amplifiers’ microprogramming system allows a hacker to induce a service failure.

The vulnerability of the formWirelessTbl function in the goform/formWirelessTbl file of the POST Request Handler component of the microprogramming software for wireless signal amplifiers from Edimax BR-6428NS is related to the execution of operations outside the buffer in memory when processing t...

The vulnerability of the formWanTcpipSetup function in the goform/formWanTcpipSetup file of the POST Request Handler component of the microprogramming system for wireless signal amplifiers from Edimax BR-6428NS, which allows a hacker to cause a service failure.

The vulnerability of the formWanTcpipSetup function in the goform/formWanTcpipSetup file of the POST Request Handler component of the wireless signal amplifiers’ microprogramming system, Edimax BR-6428NS, is related to the issue where the operation output goes beyond the buffer in memory when...

The vulnerability of the formL2TPSetup function in the goform/formL2TPSetup file of the POST Request Handler component of the microprogramming system for wireless signal amplifiers from Edimax BR-6675nD allows a hacker to induce a service failure.

The vulnerability of the formL2TPSetup function in the goform/formL2TPSetup file of the POST Request Handler component of the microprogramming system for wireless signal amplifiers from Edimax BR-6675nD is related to the issue where the operation output goes beyond the buffer in memory when...

CVE-2026-9443: Buffer Copy without Checking Size of Input

A security vulnerability has been detected in Edimax BR-6478AC 1.23. This vulnerability affects the function formL2TPSetup of the file /goform/formL2TPSetup of the component POST Request Handler. The manipulation of the argument L2TPUserName leads to buffer overflow. The attack may be initiated...

Edimax BR-6675nD 命令注入漏洞

The Edimax BR-6675nD is a dual-band broadband wireless router from China Xunzhou Edimax. A command injection vulnerability exists in the Edimax BR-6675nD version 1.12, which originates from the POST Request Handler component's manipulation of the parameter command in the file /goform/mp, which...

PT-2026-43027

A security flaw has been discovered in Edimax BR-6478AC 1.23. Affected by this issue is the function formiNICbasic of the file /goform/formiNICbasic of the component POST Request Handler. Performing a manipulation of the argument rootAPmac results in command injection. The attack can be initiated...

PT-2026-43019

A vulnerability was identified in Edimax BR-6478AC 1.23. Affected by this vulnerability is the function formAccept of the file /goform/formAccept of the component POST Request Handler. Such manipulation of the argument submit-url leads to command injection. It is possible to launch the attack...

CVE-2026-9423: Improper Neutralization of Special Elements used in a Command

A security flaw has been discovered in Edimax BR-6675nD 1.12. Impacted is the function mp of the file /goform/mp of the component POST Request Handler. Performing a manipulation of the argument command results in command injection. The attack may be initiated remotely. The exploit has been releas...

Joomla! Responsive Portfolio SQL注入漏洞

Joomla! Responsive Portfolio is a Joomla! open source Joomla website portfolio extension. A SQL injection vulnerability exists in Joomla! Responsive Portfolio version 1.6.1, which stems from SQL injection of multiple filter parameters, which could lead to an authenticated attacker injecting...

CVE-2026-9402

A vulnerability was found in Edimax BR-6675nD 1.12. The affected element is the function formWlanMP of the file /goform/formWlanMP of the component POST Request Handler. The manipulation of the argument...

EUVD-2026-31605

A vulnerability was determined in Edimax BR-6675nD 1.12. The impacted element is the function formWlSiteSurvey of the file /goform/formWlSiteSurvey of the component POST Request Handler. This manipulation of the argument selSSID causes buffer overflow. The attack may be initiated remotely. The...

CVE-2026-9403 Edimax BR-6675nD POST Request formWlSiteSurvey buffer overflow

A vulnerability was determined in Edimax BR-6675nD 1.12. The impacted element is the function formWlSiteSurvey of the file /goform/formWlSiteSurvey of the component POST Request Handler. This manipulation of the argument selSSID causes buffer overflow. The attack may be initiated remotely. The...

CVE-2026-9402

A vulnerability was found in Edimax BR-6675nD 1.12. The affected element is the function formWlanMP of the file /goform/formWlanMP of the component POST Request Handler. The manipulation of the argument...

CVE-2026-9402 Edimax BR-6675nD POST Request formWlanMP command injection

A vulnerability was found in Edimax BR-6675nD 1.12. The affected element is the function formWlanMP of the file /goform/formWlanMP of the component POST Request Handler. The manipulation of the argument...