CVE-2026-9427
HighSummary
A flaw has been found in Edimax EW-7438RPn version 1.31 affecting the function formWlSiteSurvey in the file /goform/formWlSiteSurvey. Manipulation of the argument selSSID/submit-url causes stack-based buffer overflow.
Risk Assessment
The attack can be carried out remotely, posing a serious security threat to the system. The publication of the exploit increases the risk of this vulnerability being exploited.
Recommendation
It is recommended to immediately update the device to the latest firmware version to mitigate this vulnerability. Additionally, monitor the systems for potential attack attempts.
Original NVD description (English source)
A flaw has been found in Edimax EW-7438RPn 1.31. This impacts the function formWlSiteSurvey of the file /goform/formWlSiteSurvey of the component webs. This manipulation of the argument selSSID/submit-url causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.