CVE-2026-7683
published 2026-05-03CVE-2026-7683: A weakness has been identified in Edimax BR-6428nC up to 1.16. This affects an unknown function of the file /goform/setWAN of the component Web Interface. This…
PriorityP355medium6.3CVSS 3.1
AVNACLPRLUINSUCLILAL
EPSS
1.54%
71.8th percentile
A weakness has been identified in Edimax BR-6428nC up to 1.16. This affects an unknown function of the file /goform/setWAN of the component Web Interface. This manipulation of the argument pppUserName/pptpUserName causes command injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Affected
17 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| edimax | br-6428nc | — | — |
| edimax | br-6428nc | — | — |
| edimax | br-6428nc | — | — |
| edimax | br-6428nc | — | — |
| edimax | br-6428nc | — | — |
| edimax | br-6428nc | — | — |
| edimax | br-6428nc | — | — |
| edimax | br-6428nc | — | — |
| edimax | br-6428nc | — | — |
| edimax | br-6428nc | — | — |
| edimax | br-6428nc | — | — |
| edimax | br-6428nc | — | — |
| edimax | br-6428nc | — | — |
| edimax | br-6428nc | — | — |
| edimax | br-6428nc | — | — |
| edimax | br-6428nc | — | — |
| edimax | br-6428nc | — | — |
CVSS provenance
nvdv3.16.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
nvdv4.02.1LOWCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
nvdv2.06.5MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-vvf2-q989-ccq7: A weakness has been identified in Edimax BR-6428nC up to 1
ghsa_unreviewed·2026-05-03
CVE-2026-7683 [LOW] CWE-74 GHSA-vvf2-q989-ccq7: A weakness has been identified in Edimax BR-6428nC up to 1
A weakness has been identified in Edimax BR-6428nC up to 1.16. This affects an unknown function of the file /goform/setWAN of the component Web Interface. This manipulation of the argument pppUserName/pptpUserName causes command injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
VulDB
Edimax BR-6428nC up to 1.16 Web Interface /goform/setWAN pppUserName/pptpUserName command injection
vuldb·2026-05-02
CVE-2026-7683 [CRITICAL] Edimax BR-6428nC up to 1.16 Web Interface /goform/setWAN pppUserName/pptpUserName command injection
A vulnerability was found in Edimax BR-6428nC up to 1.16. It has been classified as critical. This affects an unknown function of the file /goform/setWAN of the component Web Interface. This manipulation of the argument pppUserName/pptpUserName causes command injection.
This vulnerability is handled as CVE-2026-7683. The attack can be initiated remotely. Additionally, an exploit exists.
The vendor was contacted early about this disclosure but did not respond in any way.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://tzh00203.notion.site/Edimax-BR-6428nC-v1-16-setWAN-pppUserName-Command-Injection-33db5c52018a80dab299ef508e810d00https://tzh00203.notion.site/Edimax-BR-6428nC-v1-16-setWAN-pptpUserName-Command-Injection-33db5c52018a80949cfbcc2091340c80https://vuldb.com/submit/801597https://vuldb.com/submit/801598https://vuldb.com/vuln/360842https://vuldb.com/vuln/360842/cti
2026-05-03
Published