CVE-2026-9426
HighSummary
A vulnerability was detected in Edimax EW-7438RPn 1.31 affecting the function formHwSet of the file /goform/formHwSet. Manipulation of the arguments leads to stack-based buffer overflow.
Risk Assessment
An attacker can remotely exploit this vulnerability, posing a serious threat to the security of the device and the network.
Recommendation
It is recommended to update the device firmware to the latest version or implement appropriate security measures to mitigate the risk.
Original NVD description (English source)
A vulnerability was detected in Edimax EW-7438RPn 1.31. This affects the function formHwSet of the file /goform/formHwSet. The manipulation of the argument Anntena/Mcs/regDomain/nic0Addr/nic1Addr/wlanAddr/wanAddr/wlanSSID/wlanChan/initgain/txcck/txofdm/submit-url results in stack-based buffer overflow. The attack can be executed remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.