CVE-2026-13562 is a remote buffer overflow vulnerability in Edimax EW-7478APC version 1.04 affecting the formiNICSiteSurvey function within the POST Request Handler component. The vulnerability arises from improper handling of the selSSID argument, allowing an attacker to overflow a buffer remotely. The vendor was notified but did not provide a response or patch. The CVSS 4.0 base score is 8.7, indicating high severity with network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. Exploit code has been published, but no known exploits in the wild have been reported.

Successful exploitation of this vulnerability can lead to remote code execution or denial of service due to buffer overflow, compromising the confidentiality, integrity, and availability of the affected device. Since the attack can be initiated remotely without authentication or user interaction, the risk is significant. The published exploit increases the likelihood of exploitation attempts.

No official patch or remediation is currently available from the vendor. Users should consider isolating or discontinuing use of the affected device version 1.04 until a fix is provided. Monitor vendor communications for any updates. Network-level protections such as firewall rules to restrict access to the device's management interface may reduce exposure.