CVE-2026-9480
HighSummary
A vulnerability was detected in Edimax EW-7438RPn 1.31, affecting the formrefresh function in the /goform/formrefresh file. Manipulation of the submit-url argument results in a stack-based buffer overflow.
Risk Assessment
An attacker can remotely exploit this vulnerability, posing a serious threat to the security of the device and the network it is installed in.
Recommendation
It is recommended to update the device firmware to the latest version or implement appropriate security measures to minimize the risk of an attack.
Original NVD description (English source)
A vulnerability was detected in Edimax EW-7438RPn 1.31. The impacted element is the function formrefresh of the file /goform/formrefresh. The manipulation of the argument submit-url results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.