Vulnerability · Published Sep 27, 2026 · Assigned by VulDB

CVE-2026-100745Edimax BR-6428nC Wireless Wizard formWizSurvey stack-based overflow

Medium 6.3

In plain English

A medium-severity stack buffer overflow in BR-6428nC from Edimax. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 24% of all known vulnerabilities).

Severity (CVSS 3.1)6.3Medium

Exploit odds (30 days)0.3%top 76.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability has been found in Edimax BR-6428nC 1.16. The impacted element is an unknown function of the file /goform/formWizSurvey of the component Wireless Wizard Handler. The manipulation of the argument interface1/interface2 leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.

Affected products (as reported)

Vendor	Product	Versions
Edimax	BR-6428nC	1.16

Weakness: CWE-121, CWE-119 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

References

VDB-410616 | Edimax BR-6428nC Wireless Wizard formWizSurvey stack-based overflow vdb-entry, technical-description
VDB-410616 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
CVE-2026-100745 | CVE Analysis and Report third-party-advisory
Submit #906337 | Edimax BR-6428nC v1.16 Stack-based Buffer Overflow third-party-advisory
https://tzh00203.notion.site/Edimax-BR-6428nC-formWizSurvey-Interface-Stack-Overflow-33db5c52018a80b5b950feb29846006c exploit