Edimax · Ew-7438Rpn · CVE-2026-9460
**Name of the Vulnerable Software and Affected Versions**
Edimax EW-7438RPn version 1.31
**Description**
A stack-based buffer overflow can be triggered remotely via the `/goform/formAccept` endpoint. The issue exists within the `formAccept()` function when processing the `submit-url` argument. A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially leading to crashes or arbitrary code execution.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
As a temporary workaround, restrict access to the `/goform/formAccept` endpoint to minimize the risk of exploitation.