CVE-2026-36734 affects EDIMAX BR-6428nS V3 version 1.15 and allows an authenticated attacker on the network to perform command injection via crafted input submitted to the WLAN configuration interface. The root cause is insufficient input validation, enabling arbitrary system command execution. The vulnerability is classified under CWE-77 (Improper Neutralization of Special Elements used in a Command). The CVSS v3.1 base score is 8.8, reflecting network attack vector, low attack complexity, required privileges, no user interaction, and high impact on confidentiality, integrity, and availability. No patch or official remediation has been published yet.

Successful exploitation allows an authenticated attacker to execute arbitrary system commands on the affected device, potentially leading to full compromise of the router. This can result in unauthorized control, data disclosure, service disruption, or further network attacks. The high CVSS score indicates severe impact on device security and network trustworthiness.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to trusted users only and limit administrative access to the device. Monitor for unusual activity related to WLAN configuration changes. Avoid exposing the device management interface to untrusted networks.