Vulnerability · Published May 3, 2026 · Assigned by VulDB
CVE-2026-7684Edimax BR-6428nC setWAN buffer overflow
High 8.8
In plain English
A high-severity buffer overflow in BR-6428nC from Edimax. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 42% of all known vulnerabilities).
Official description
A security vulnerability has been detected in Edimax BR-6428nC up to 1.16. This impacts an unknown function of the file /goform/setWAN. Such manipulation of the argument pptpDfGateway leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected products (as reported)
Weakness: CWE-120, CWE-119 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R
References
- VDB-360843 | Edimax BR-6428nC setWAN buffer overflow vdb-entry, technical-description
- VDB-360843 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
- Submit #801599 | Edimax BR-6428nC v1.16 Buffer Overflow third-party-advisory
- https://tzh00203.notion.site/Edimax-BR-6428nC-v1-16-setWAN-pptpDfGateway-Stack-Overflow-33db5c52018a80c1835dd4fab4b6c7f2 exploit