Edimax Br-6428Ns vulnerabilities

CVE-2026-9295 [HIGH] CWE-119 CVE-2026-9295: A security flaw has been discovered in Edimax BR-6428NS 1.10. This affects the function formWireless A security flaw has been discovered in Edimax BR-6428NS 1.10. This affects the function formWirelessTbl of the file /goform/formWirelessTbl of the component POST Request Handler. Performing a manipulation of the argument vapurl results in buffer overflow. The attack can be initiated remotely. The exploit has been released to the public and may be used f

CVE-2026-8775 [HIGH] CWE-119 CVE-2026-8775: A flaw has been found in Edimax BR-6428NS 1.10. This affects the function formL2TPSetup of the file A flaw has been found in Edimax BR-6428NS 1.10. This affects the function formL2TPSetup of the file /goform/formL2TPSetup of the component POST Request Handler. This manipulation of the argument L2TPUserName causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been published and may be used. The vendor was contacted ear

CVE-2026-9294 [HIGH] CWE-119 CVE-2026-9294: A vulnerability was identified in Edimax BR-6428NS 1.10. The impacted element is the function formWa A vulnerability was identified in Edimax BR-6428NS 1.10. The impacted element is the function formWanTcpipSetup of the file /goform/formWanTcpipSetup of the component POST Request Handler. Such manipulation of the argument pppUserName leads to buffer overflow. It is possible to launch the attack remotely. The exploit is publicly available and might be u

CVE-2026-8776 [HIGH] CWE-119 CVE-2026-8776: A vulnerability has been found in Edimax BR-6428NS 1.10. This vulnerability affects the function for A vulnerability has been found in Edimax BR-6428NS 1.10. This vulnerability affects the function formPPTPSetup of the file /goform/formPPTPSetup of the component POST Request Handler. Such manipulation of the argument pptpUserName leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may

CVE-2026-9297 [MEDIUM] CWE-74 CVE-2026-9297: A security vulnerability has been detected in Edimax BR-6428NS 1.10. Affected is the function formWl A security vulnerability has been detected in Edimax BR-6428NS 1.10. Affected is the function formWlbasic of the file /goform/formWlbasic of the component POST Request Handler. The manipulation of the argument repeaterSSID leads to command injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. The vend

CVE-2026-9296 [MEDIUM] CWE-74 CVE-2026-9296: A weakness has been identified in Edimax BR-6428NS 1.10. This impacts the function system of the fil A weakness has been identified in Edimax BR-6428NS 1.10. This impacts the function system of the file /goform/formWlanM of the component POST Request Handler. Executing a manipulation of the argument ateFunc/ateGain/ateTxCount/ateChan/ateRate/ateMacID/e2pTxPower1/e2pTxPower2/e2pTxPower3/e2pTxPower4/e2pTxPower5/e2pTxPower6/e2pTxPower7/e2pTx2Power1/e2pTx

CVE-2026-8777 [MEDIUM] CWE-74 CVE-2026-8777: A vulnerability was found in Edimax BR-6428NS 1.10. This issue affects the function formStaDrvSetup A vulnerability was found in Edimax BR-6428NS 1.10. This issue affects the function formStaDrvSetup of the file /goform/formStaDrvSetup of the component POST Request Handler. Performing a manipulation of the argument stadrv_ssid results in command injection. The attack can be initiated remotely. The exploit has been made public and could be used. The ve