CVE-2026-9295
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk42th percentile - higher than 42% of all known CVEs
Summary
A buffer overflow vulnerability was found in Edimax BR-6428NS version 1.10 in the formWirelessTbl function of /goform/formWirelessTbl. Manipulation of the vapurl argument leads to buffer overflow. The attack is remotely exploitable and the exploit is public. The vendor did not respond.
Risk Assessment
A remote attacker can crash the router or potentially gain control, leading to network compromise.
Recommendation
Block remote access to the router's management interface. Consider replacing the device with a supported model, as the vendor has not released a patch.
Other vulnerabilities in Edimax BR-6428NS
See all- CVE-2026-8775High
A flaw has been found in Edimax BR-6428NS version 1.10 affecting the function formL2TPSetup in the file /goform/formL2TPSetup. Manipulation of the argument L2TPUserName causes buffer overflow, allowing for remote attack initiation.
- CVE-2026-9297Medium
A command injection vulnerability was identified in Edimax BR-6428NS version 1.10 in the formWlbasic function of the /goform/formWlbasic file. An attacker can remotely manipulate the repeaterSSID argument, leading to arbitrary command execution. The exploit has been publicly disclosed and may be used.
- CVE-2026-9296Medium
A command injection vulnerability has been found in Edimax BR-6428NS version 1.10 in the system function of the /goform/formWlanM file. The attack can be launched remotely by manipulating multiple arguments.
- CVE-2026-9294High
A buffer overflow vulnerability was found in Edimax BR-6428NS version 1.10 in the formWanTcpipSetup function of /goform/formWanTcpipSetup. Manipulation of the pppUserName argument leads to buffer overflow. The attack is remotely exploitable and the exploit is public. The vendor did not respond.
Original NVD description (English source)
A security flaw has been discovered in Edimax BR-6428NS 1.10. This affects the function formWirelessTbl of the file /goform/formWirelessTbl of the component POST Request Handler. Performing a manipulation of the argument vapurl results in buffer overflow. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.