PT-2026-42950 · Edimax · Ew-7438Rpn

Bond_Yes · Published 2026-05-24 · Updated 2026-05-25 · CVE-2026-9426

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Edimax EW-7438RPn version 1.31

Description A stack-based buffer overflow can be executed remotely via the formHwSet() function located in the '/goform/formHwSet' endpoint. This occurs through the manipulation of the Anntena, Mcs, regDomain, nic0Addr, nic1Addr, wlanAddr, wanAddr, wlanSSID, wlanChan, initgain, txcck, txofdm, or submit-url arguments.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Stack Overflow

Buffer Overflow

Weakness Enumeration

CWE-121

CWE-119

Related Identifiers

CVE-2026-9426

Affected Products

Ew-7438Rpn

References · 5

• 🔥 https://github.com/wudipjq/my_vuln/blob/main/Edimax/vuln_10/10.md · Exploit
• https://vuldb.com/vuln/365407 · Note
• https://vuldb.com/submit/813894 · Note
• https://vuldb.com/vuln/365407/cti · Note
• https://twitter.com/vuldb/status/2058444423625884001 · Twitter Post