CVE-2026-96892
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
A flaw in Edimax BR-6428nC 1.16. The websRedirect function of the goform Handler improperly handles the submit-url argument, leading to open redirect. The attack can be launched remotely. The exploit has been published.
Risk Assessment
An attacker can redirect users to malicious sites, potentially leading to phishing or malware installation.
Recommendation
Apply vendor patches if available. Restrict device access and monitor network traffic.
Other vulnerabilities in Edimax BR-6428nC
See all- CVE-2026-7684High
A vulnerability has been detected in Edimax BR-6428nC up to version 1.16, affecting an unknown function of the file /goform/setWAN. Manipulation of the argument pptpDfGateway leads to buffer overflow.
- CVE-2026-100745Medium
A vulnerability in the Edimax BR-6428nC router version 1.16 affects an unknown function in the file /goform/formWizSurvey of the Wireless Wizard Handler component. Manipulation of the interface1/interface2 arguments leads to a stack-based buffer overflow. Remote exploitation is possible, and the exploit has been publicly disclosed.
Original NVD description (English source)
A flaw has been found in Edimax BR-6428nC 1.16. The impacted element is the function websRedirect of the component goform Handler. Executing a manipulation of the argument submit-url can lead to open redirect. The attack may be launched remotely. The exploit has been published and may be used. Multiple endpoints are affected. The vendor was contacted early about this disclosure but did not respond in any way.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS