Skip to content
Threat Feed

Vendor

Edimax

10 briefs RSS
critical threat

Edimax BR-6478AC Stack-Based Buffer Overflow Vulnerability (CVE-2026-10125)

A stack-based buffer overflow vulnerability (CVE-2026-10125) exists in the formPPPoESetup function of the /goform/formPPPoESetup file in Edimax BR-6478AC version 1.23, allowing a remote attacker to execute arbitrary code by manipulating the pppUserName argument in a POST request; a public exploit is available.

BR-6478AC 1.23 cve CVE-2026-10125 buffer overflow edimax router rce
2r 1t 1c
critical threat

Edimax EW-7438RPn Stack-Based Buffer Overflow Vulnerability (CVE-2026-9481)

A stack-based buffer overflow vulnerability (CVE-2026-9481) exists in the formStats function of the /goform/formStats file in Edimax EW-7438RPn version 1.31, allowing a remote attacker to execute arbitrary code by manipulating the submit-url argument.

EW-7438RPn 1.31 cve cve-2026-9481 buffer overflow edimax stack overflow
2r 1t 1c
high threat

Edimax EW-7438RPn Stack-Based Buffer Overflow Vulnerability (CVE-2026-9463)

Edimax EW-7438RPn version 1.31 is vulnerable to a stack-based buffer overflow in the formLicence function of the /goform/formLicence file, allowing remote attackers to execute arbitrary code by manipulating the submit-url argument; a public exploit is available.

EW-7438RPn 1.31 cve buffer_overflow edimax
2r 1t 1c
high advisory

Edimax EW-7438RPn Stack-Based Buffer Overflow Vulnerability (CVE-2026-9462)

Edimax EW-7438RPn version 1.31 is vulnerable to a stack-based buffer overflow (CVE-2026-9462) in the `formWpsProxyEnable` function of `/goform/formWpsProxyEnable`, triggered by manipulating the `submit-url` argument, allowing remote attackers to execute arbitrary code; a public exploit is available.

EW-7438RPn 1.31 cve buffer overflow edimax
1r 1c
high threat

Edimax EW-7438RPn Stack-Based Buffer Overflow Vulnerability (CVE-2026-9459)

A stack-based buffer overflow vulnerability (CVE-2026-9459) exists in the formConnectionSetting function of /goform/formConnectionSetting in Edimax EW-7438RPn 1.31, allowing a remote attacker to execute arbitrary code by manipulating the max_Conn/timeOut arguments, with a public exploit available.

EW-7438RPn 1.31 cve buffer overflow edimax
2r 1t 1c
critical advisory

CVE-2026-9426 - Edimax EW-7438RPn Stack-Based Buffer Overflow

A stack-based buffer overflow vulnerability exists in Edimax EW-7438RPn version 1.31 in the formHwSet function of the /goform/formHwSet file, which can be triggered by manipulating the Anntena/Mcs/regDomain/nic0Addr/nic1Addr/wlanAddr/wanAddr/wlanSSID/wlanChan/initgain/txcck/txofdm/submit-url argument, potentially leading to remote code execution.

EW-7438RPn 1.31 cve cve-2026-9426 buffer-overflow rce edimax
2r 1t 1c
high advisory

Edimax BR-6675nD Remote Buffer Overflow Vulnerability (CVE-2026-9381)

A remote buffer overflow vulnerability (CVE-2026-9381) exists in the `formPPPoESetup` function of the Edimax BR-6675nD 1.12 router's web management interface, allowing unauthenticated attackers to potentially execute arbitrary code by manipulating the `pppUserName` argument in a POST request.

BR-6675nD 1.12 buffer overflow remote code execution cve
2r 2t 1c
high threat

Edimax BR-6428NS Buffer Overflow Vulnerability (CVE-2026-9294)

A buffer overflow vulnerability (CVE-2026-9294) exists in the formWanTcpipSetup function of the /goform/formWanTcpipSetup file in Edimax BR-6428NS 1.10, which can be triggered by a remote attacker manipulating the pppUserName argument via a POST request, potentially leading to arbitrary code execution.

exploited BR-6428NS 1.10 buffer-overflow router cve
2r 1t 1c
critical advisory

Edimax BR-6428nC Buffer Overflow Vulnerability (CVE-2026-7684)

A remote buffer overflow vulnerability exists in Edimax BR-6428nC devices up to version 1.16 via manipulation of the pptpDfGateway argument in the /goform/setWAN file, potentially allowing for arbitrary code execution.

BR-6428nC buffer overflow cve-2026-7684 webserver
2r 1t 1c
critical advisory

Edimax BR-6208AC Buffer Overflow Vulnerability

A buffer overflow vulnerability exists in Edimax BR-6208AC devices (<= 1.02) via manipulation of the pptpDfGateway argument in the /goform/setWAN endpoint, potentially allowing remote attackers to execute arbitrary code.

BR-6208AC buffer overflow cve-2026-7685 router webserver
2r 1t 1c