CVE-2026-8777
MediumCVSS 6.3Exploitation Probability (EPSS)
High risk80th percentile - higher than 80% of all known CVEs
Summary
A vulnerability was found in Edimax BR-6428NS 1.10 in the formStaDrvSetup function of the /goform/formStaDrvSetup file within the POST Request Handler. Manipulating the stadrv_ssid argument leads to command injection, and the attack can be initiated remotely. The exploit is publicly available and the vendor did not respond.
Risk Assessment
A remote attacker could execute arbitrary commands on the device, potentially leading to compromise of the router and network traffic. Public exploit availability increases the likelihood of rapid exploitation.
Recommendation
Restrict access to the device management interface to trusted networks and apply the patch as soon as it becomes available. Consider replacing the device with a supported model if updating is not possible.
Other vulnerabilities in Edimax BR-6428NS
See all- CVE-2026-9297Medium
A command injection vulnerability was identified in Edimax BR-6428NS version 1.10 in the formWlbasic function of the /goform/formWlbasic file. An attacker can remotely manipulate the repeaterSSID argument, leading to arbitrary command execution. The exploit has been publicly disclosed and may be used.
- CVE-2026-9296Medium
A command injection vulnerability has been found in Edimax BR-6428NS version 1.10 in the system function of the /goform/formWlanM file. The attack can be launched remotely by manipulating multiple arguments.
- CVE-2026-9295High
A buffer overflow vulnerability was found in Edimax BR-6428NS version 1.10 in the formWirelessTbl function of /goform/formWirelessTbl. Manipulation of the vapurl argument leads to buffer overflow. The attack is remotely exploitable and the exploit is public. The vendor did not respond.
- CVE-2026-9294High
A buffer overflow vulnerability was found in Edimax BR-6428NS version 1.10 in the formWanTcpipSetup function of /goform/formWanTcpipSetup. Manipulation of the pppUserName argument leads to buffer overflow. The attack is remotely exploitable and the exploit is public. The vendor did not respond.
- CVE-2026-8775High
A flaw has been found in Edimax BR-6428NS version 1.10 affecting the function formL2TPSetup in the file /goform/formL2TPSetup. Manipulation of the argument L2TPUserName causes buffer overflow, allowing for remote attack initiation.
Original NVD description (English source)
A vulnerability was found in Edimax BR-6428NS 1.10. This issue affects the function formStaDrvSetup of the file /goform/formStaDrvSetup of the component POST Request Handler. Performing a manipulation of the argument stadrv_ssid results in command injection. The attack can be initiated remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS