PT-2026-43048 · Edimax · Ew-7438Rpn

Buoy · Published 2026-05-25 · Updated 2026-05-25 · CVE-2026-9459

Mitre

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A security flaw has been discovered in Edimax EW-7438RPn 1.31. This affects the function formConnectionSetting of the file /goform/formConnectionSetting. Performing a manipulation of the argument max Conn/timeOut results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Exploit

Buffer Overflow

Stack Overflow

Weakness Enumeration

CWE-119

CWE-121

Related Identifiers

CVE-2026-9459

Affected Products

Ew-7438Rpn

References · 4

• 🔥 https://github.com/wudipjq/my_vuln/blob/main/Edimax/vuln_12/12.md · Exploit
• https://vuldb.com/submit/813896 · Note
• https://vuldb.com/vuln/365440 · Note
• https://vuldb.com/vuln/365440/cti · Note