CVE-2026-9480 is a high-severity stack-based buffer overflow vulnerability in Edimax EW-7438RPn version 1.31. The flaw exists in the formrefresh function handling the submit-url argument, allowing remote attackers to trigger the overflow. Exploits are publicly available, but no vendor response or patch has been provided. The vulnerability enables potential remote code execution or denial of service due to memory corruption.
CVE-2026-9479 is a stack-based buffer overflow vulnerability in the Edimax EW-7438RPn version 1.31. It occurs in the formLogout function via the submit-url argument, allowing remote attackers to trigger the overflow. The vulnerability has a high severity with a CVSS score of 8.7. The vendor has not responded to the disclosure and no patch or remediation is currently available. Exploit code has been publicly disclosed, but no known exploits in the wild have been reported.
CVE-2026-9463 is a high-severity stack-based buffer overflow vulnerability in the Edimax EW-7438RPn device firmware version 1.31. The flaw exists in the formLicence function of the /goform/formLicence endpoint, where improper handling of the submit-url argument can lead to a stack-based buffer overflow. This vulnerability can be exploited remotely without user interaction or privileges. Although an exploit has been published, there is no indication that it is currently observed in the wild. The vendor has not responded to disclosure requests, and no official patch or remediation guidance is available at this time.
CVE-2026-9462 is a stack-based buffer overflow vulnerability in the Edimax EW-7438RPn version 1.31. It occurs in the formWpsProxyEnable function when processing the submit-url argument. This vulnerability can be exploited remotely without user interaction. The exploit code is publicly available, but the vendor has not responded or provided a fix. The vulnerability has a high severity score of 8.7 CVSS 4.0.
CVE-2026-9461 is a high-severity stack-based buffer overflow vulnerability in the Edimax EW-7438RPn device version 1.31. The flaw exists in the formRadius function of the /goform/formRadius file, where manipulation of the submit-url argument can trigger the overflow. This vulnerability can be exploited remotely without user interaction and has been publicly disclosed. The vendor has not responded to the disclosure, and no official patch or remediation guidance is currently available.
A weakness has been identified in Edimax EW-7438RPn 1.31. This impacts the function formAccept of the file /goform/formAccept. Executing a manipulation of the argument submit-url can lead to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2026-9459 is a stack-based buffer overflow vulnerability in Edimax EW-7438RPn version 1.31. It occurs in the formConnectionSetting function when manipulating the max_Conn/timeOut argument. The vulnerability can be exploited remotely without user interaction. The vendor has not responded to the disclosure, and no patch or official remediation is currently available. The exploit code has been publicly released, increasing the risk of attacks.
CVE-2026-9443 is a high-severity buffer overflow vulnerability in the Edimax BR-6478AC router firmware version 1.23. It occurs in the formL2TPSetup function of the POST request handler when processing the L2TPUserName argument. The vulnerability can be exploited remotely without user interaction and allows for high impact on confidentiality, integrity, and availability. The exploit has been publicly disclosed, but no vendor response or patch is currently available.
A weakness has been identified in Edimax BR-6478AC 1.23. This affects the function formiNICSiteSurvey of the file /goform/formiNICSiteSurvey of the component POST Request Handler. Executing a manipulation of the argument selSSID can lead to buffer overflow. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2026-9441 is a command injection vulnerability in the Edimax BR-6478AC router version 1.23. The flaw exists in the formiNICbasic function of the /goform/formiNICbasic POST request handler, where manipulation of the rootAPmac argument allows remote command injection. The vulnerability has a medium severity score of 5.3 and an exploit has been publicly released. The vendor has not responded or provided a fix. No official patch or mitigation guidance is currently available.
A vulnerability was identified in Edimax BR-6478AC 1.23. Affected by this vulnerability is the function formAccept of the file /goform/formAccept of the component POST Request Handler. Such manipulation of the argument submit-url leads to command injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2026-9439 is a command injection vulnerability in the Edimax BR-6675nD router firmware version 1.12. The flaw exists in the stainfo function of the /goform/stainfo file, where manipulation of the interface argument allows remote attackers to execute arbitrary commands. The vulnerability has been publicly disclosed, but the vendor has not responded or provided a fix. The CVSS 4.0 base score is 5.3, indicating a medium severity level.
CVE-2026-9427 is a high-severity stack-based buffer overflow vulnerability in Edimax EW-7438RPn version 1.31. It affects the formWlSiteSurvey function in the /goform/formWlSiteSurvey component, triggered by manipulation of the selSSID/submit-url argument. The vulnerability can be exploited remotely without user interaction or privileges. Although an exploit has been published, there is no vendor response or official patch available at this time.
CVE-2026-9426 is a high-severity stack-based buffer overflow vulnerability in the Edimax EW-7438RPn version 1.31. It affects the formHwSet function in the /goform/formHwSet file, where manipulation of certain arguments can trigger the overflow. The vulnerability can be exploited remotely without user interaction. Although the exploit code is publicly available, the vendor has not responded or provided a patch. No official remediation or fix is currently confirmed.
CVE-2026-9425 is a high-severity stack-based buffer overflow vulnerability in Edimax EW-7438RPn version 1.31. It arises from improper handling of multiple parameters in the formWlanMP function within the /goform/formWlanMP file. This flaw allows remote attackers to potentially execute arbitrary code without user interaction. The vulnerability has been publicly disclosed, but no official vendor response or patch is currently available.
A weakness has been identified in Edimax EW-7438RPn 1.31. The affected element is the function formWlanMP of the file /goform/formWlanMP of the component Content-Type Handler. Executing a manipulation of the argument ateFunc/ateGain/ateTxCount/ateChan/ateRate/ateMacID/e2pTxPower1/e2pTxPower2/e2pTxPower3/e2pTxPower4/e2pTxPower5/e2pTxPower6/e2pTxPower7/e2pTx2Power1/e2pTx2Power2/e2pTx2Power3/e2pTx2Power4/e2pTx2Power5/e2pTx2Power6/e2pTx2Power7/ateTxFreqOffset/ateMode/ateBW/ateAntenna/e2pTxFreqOffset/e2pTxPwDeltaB/e2pTxPwDeltaG/e2pTxPwDeltaMix/e2pTxPwDeltaN/readE2P can lead to os command injection. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2026-9423 is a command injection vulnerability in the Edimax BR-6675nD router version 1.12. The flaw exists in the POST request handler function mp located at /goform/mp, where manipulation of the 'command' argument allows remote attackers to execute arbitrary commands. The vulnerability has a CVSS 4.0 base score of 5.1, indicating medium severity. The vendor has not responded to disclosure and no patch or remediation is currently available. Public exploit code has been released, but no known exploitation in the wild has been reported.
CVE-2026-9403 is a high-severity buffer overflow vulnerability in the Edimax BR-6675nD router firmware version 1.12. It occurs in the formWlSiteSurvey function of the POST Request Handler component when processing the selSSID argument. This vulnerability can be exploited remotely without user interaction. The vendor has not responded to the disclosure, and no official patch or remediation guidance is currently available. The vulnerability has been publicly disclosed, but there are no known exploits in the wild at this time.
CVE-2026-9402 is a command injection vulnerability in the Edimax BR-6675nD router firmware version 1.12. It affects the formWlanMP function in the POST request handler, where manipulation of certain parameters can lead to remote command injection. The vulnerability has a medium severity with a CVSS score of 5.3. The vendor has not responded to the disclosure, and no official patch or remediation is currently available. Exploit details have been made public, but there are no known exploits in the wild at this time.
CVE-2026-9401 is a high-severity buffer overflow vulnerability in the Edimax BR-6675nD router version 1.12. The flaw exists in the formWanTcpipSetup function handling POST requests, where manipulation of the pppUserName argument can cause a buffer overflow. This vulnerability can be exploited remotely without user interaction. Although the exploit has been publicly disclosed, there is no known patch or vendor response at this time.