CVE-2026-100745
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
A vulnerability in the Edimax BR-6428nC router version 1.16 affects an unknown function in the file /goform/formWizSurvey of the Wireless Wizard Handler component. Manipulation of the interface1/interface2 arguments leads to a stack-based buffer overflow. Remote exploitation is possible, and the exploit has been publicly disclosed.
Risk Assessment
Risk of remote code execution or device crash, potentially leading to full compromise of the router and network security breach.
Recommendation
Apply available firmware updates from the vendor or restrict access to the administrative interface from trusted IP addresses.
Other vulnerabilities in Edimax BR-6428nC
See all- CVE-2026-7684High
A vulnerability has been detected in Edimax BR-6428nC up to version 1.16, affecting an unknown function of the file /goform/setWAN. Manipulation of the argument pptpDfGateway leads to buffer overflow.
- CVE-2026-96892Medium
A flaw in Edimax BR-6428nC 1.16. The websRedirect function of the goform Handler improperly handles the submit-url argument, leading to open redirect. The attack can be launched remotely. The exploit has been published.
Original NVD description (English source)
A vulnerability has been found in Edimax BR-6428nC 1.16. The impacted element is an unknown function of the file /goform/formWizSurvey of the component Wireless Wizard Handler. The manipulation of the argument interface1/interface2 leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS