PT-2026-42901 · Edimax · Ew-7438Rpn

Bond · Published 2026-05-24 · Updated 2026-05-24 · CVE-2026-9346

Mitre

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A flaw has been found in Edimax EW-7438RPn up to 1.31. This impacts the function formWirelessTbl of the file /goform/formWirelessTbl of the component webs. Executing a manipulation of the argument submit-url can lead to buffer overflow. The attack may be performed from remote. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

CWE-120

Related Identifiers

CVE-2026-9346

Affected Products

Ew-7438Rpn

References · 5

• 🔥 https://github.com/wudipjq/my_vuln/blob/main/Edimax/vuln_4/4.md · Exploit
• https://vuldb.com/submit/813888 · Note
• https://vuldb.com/vuln/365309 · Note
• https://vuldb.com/vuln/365309/cti · Note
• https://vuldb.com/submit/811541 · Note