CVE-2026-9347
MediumCVSS 6.3Exploitation Probability (EPSS)
Elevated risk72th percentile - higher than 72% of all known CVEs
Summary
A vulnerability was detected in Edimax EW-7438RPn up to version 1.31 allowing OS command injection via the formWizSurvey function in /goform/formWizSurvey. The attack can be launched remotely and the exploit is publicly available. The vendor did not respond.
Risk Assessment
A remote attacker can execute arbitrary system commands on the device, potentially leading to full compromise of the router and network security.
Recommendation
Immediately disconnect the device from the network and contact the vendor for an update. Consider replacing the device with a supported model.
Other vulnerabilities in Edimax EW-7438RPn
See all- CVE-2026-9482High
Stack-based buffer overflow vulnerability in the formSDHCP function in /goform/formSDHCP on Edimax EW-7438RPn 1.31. Manipulating the submit-url argument can lead to buffer overflow.
- CVE-2026-9481High
Stack-based buffer overflow vulnerability in the formStats function in /goform/formStats on Edimax EW-7438RPn 1.31. Manipulating the submit-url argument can lead to buffer overflow.
- CVE-2026-9480High
A vulnerability was detected in Edimax EW-7438RPn 1.31. The function formrefresh in the file /goform/formrefresh is vulnerable to stack-based buffer overflow via the submit-url argument. The attack can be launched remotely, and the exploit is public. The vendor did not respond.
- CVE-2026-9479High
Stack-based buffer overflow vulnerability in the formLogout function in /goform/formLogout on Edimax EW-7438RPn 1.31. Manipulating the submit-url argument can lead to buffer overflow.
- CVE-2026-9463High
Stack-based buffer overflow vulnerability in the formLicence function in /goform/formLicence on Edimax EW-7438RPn 1.31. Manipulating the submit-url argument can lead to buffer overflow.
- CVE-2026-9462High
Stack-based buffer overflow vulnerability in the formWpsProxyEnable function in /goform/formWpsProxyEnable on Edimax EW-7438RPn 1.31. Manipulating the submit-url argument can lead to buffer overflow.
- CVE-2026-9461High
A stack-based buffer overflow vulnerability was found in the Edimax EW-7438RPn 1.31 in the formRadius function of the /goform/formRadius file via manipulation of the submit-url argument. The attack can be initiated remotely, and the exploit has been publicly disclosed.
- CVE-2026-9460High
A stack-based buffer overflow vulnerability was found in the Edimax EW-7438RPn 1.31 in the formAccept function of the /goform/formAccept file via manipulation of the submit-url argument. The attack can be initiated remotely, and the exploit has been publicly disclosed.
- CVE-2026-9459High
A stack-based buffer overflow vulnerability was found in the Edimax EW-7438RPn 1.31 in the formConnectionSetting function of the /goform/formConnectionSetting file via manipulation of the max_Conn/timeOut arguments. The attack can be initiated remotely, and the exploit has been publicly disclosed.
- CVE-2026-9427High
Edimax EW-7438RPn version 1.31 is vulnerable to a stack-based buffer overflow in the formWlSiteSurvey function of the /goform/formWlSiteSurvey file in the webs component. Manipulation of the selSSID/submit-url arguments causes the overflow. The attack can be performed remotely and the exploit is publicly available.
Original NVD description (English source)
A vulnerability has been found in Edimax EW-7438RPn up to 1.31. Affected is the function formWizSurvey of the file /goform/formWizSurvey of the component webs. The manipulation of the argument ip/mask/gateway leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.