CVE-2026-82702

MediumCVSS 6.6

Published: 31/08/2026(UTC)Updated: 31/08/2026(UTC)Translated: 31/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

2.06%

80th percentile - higher than 80% of all known CVEs

Summary

A vulnerability was identified in Edimax BR-6214K 1.40 in the system function of www/wlanMP.asp. Manipulation of the ateFunc argument leads to OS command injection, allowing remote attacks. The exploit is publicly available.

Risk Assessment

An attacker can remotely execute arbitrary commands on the device, potentially leading to full compromise of the router and network traffic interception.

Recommendation

Immediately restrict access to the device's admin panel and check for firmware updates. If the vendor does not respond, consider replacing the device with a supported one.

Other vulnerabilities in Edimax BR-6214K

CVE-2026-82703Medium
An OS command injection vulnerability was found in Edimax BR-6214K 1.40 in the system function of www/ping.asp (asp_setPing Endpoint). Manipulating the pingstr argument allows remote command execution. The exploit is public and the vendor did not respond.

Original NVD description (English source)

A vulnerability was identified in Edimax BR-6214K 1.40. This affects the function system of the file www/wlanMP.asp of the component asp_WlanMP Endpoint. Such manipulation of the argument ateFunc leads to os command injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS