Threat Intelligence Database

CVE-2026-9480 is a high-severity stack-based buffer overflow vulnerability in Edimax EW-7438RPn version 1.31. The flaw exists in the formrefresh function handling the submit-url argument, allowing remote attackers to trigger the overflow. Exploits are publicly available, but no vendor response or patch has been provided. The vulnerability enables potential remote code execution or denial of service due to memory corruption.

CVE-2026-9479 is a stack-based buffer overflow vulnerability in the Edimax EW-7438RPn version 1.31. It occurs in the formLogout function via the submit-url argument, allowing remote attackers to trigger the overflow. The vulnerability has a high severity with a CVSS score of 8.7. The vendor has not responded to the disclosure and no patch or remediation is currently available. Exploit code has been publicly disclosed, but no known exploits in the wild have been reported.

CVE-2026-9425 is a high-severity stack-based buffer overflow vulnerability in Edimax EW-7438RPn version 1.31. It arises from improper handling of multiple parameters in the formWlanMP function within the /goform/formWlanMP file. This flaw allows remote attackers to potentially execute arbitrary code without user interaction. The vulnerability has been publicly disclosed, but no official vendor response or patch is currently available.

A vulnerability was identified in Edimax EW-7438RPn 1.28a. Affected by this vulnerability is the function formHwSet of the file /goform/formHwSet of the component POST Request Handler. The manipulation of the argument Anntena/Mcs/regDomain/nic0Addr/nic1Addr/wlanAddr/wanAddr/wlanSSID/wlanChan/comd/initgain/txcck/txofdm leads to command injection. The attack can be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

A security vulnerability has been detected in Edimax EW-7438RPn up to 1.31. The impacted element is an unknown function of the file /goform/formWpsStart of the component webs. Such manipulation of the argument pinCode/wlan-url leads to stack-based buffer overflow. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.