CVE-2026-7685

High

Published: 03/05/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

A vulnerability was detected in Edimax BR-6208AC up to version 1.02, affecting an unknown function of the file /goform/setWAN. Manipulating the argument pptpDfGateway results in buffer overflow.

Risk Assessment

The attack may be initiated remotely, and the public availability of the exploit increases the risk of this vulnerability being exploited by third parties.

Recommendation

It is recommended to update the device to the latest firmware version to mitigate the risks associated with this vulnerability.

Other vulnerabilities in Edimax BR-6208AC

CVE-2025-70161Critical
EDIMAX BR-6208AC router version V2_1.02 is vulnerable to command injection. The pppUserName field is passed directly to the system() function without proper sanitization, allowing an attacker to execute arbitrary code.

Original NVD description (English source)

A vulnerability was detected in Edimax BR-6208AC up to 1.02. Affected is an unknown function of the file /goform/setWAN. Performing a manipulation of the argument pptpDfGateway results in buffer overflow. The attack may be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.