CVE-2026-9442: Edimax BR-6478AC POST Request formiNICSiteSurvey buffer overflow
A weakness has been identified in Edimax BR-6478AC 1.23. This affects the function formiNICSiteSurvey of the file /goform/formiNICSiteSurvey of the component POST Request Handler. Executing a manipulation of the argument selSSID can lead to buffer overflow. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-9442?
The severity of CVE-2026-9442 is high, rated at 8.8.
What vulnerability does CVE-2026-9442 address?
CVE-2026-9442 addresses a buffer overflow vulnerability in the formiNICSiteSurvey function of the Edimax BR-6478AC.
How can CVE-2026-9442 be exploited?
CVE-2026-9442 can be exploited remotely by manipulating the selSSID argument in a POST request.
What is the risk of not addressing CVE-2026-9442?
Not addressing CVE-2026-9442 leaves systems vulnerable to remote code execution due to buffer overflow.
How do I fix CVE-2026-9442?
To fix CVE-2026-9442, update the Edimax BR-6478AC firmware to the latest version that addresses this vulnerability.