PT-2026-45128 · Edimax · Br-6478Ac

Wxhwxhwxh_Mie · Published 2026-05-30 · Updated 2026-05-30 · CVE-2026-10126

Mitre

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A security flaw has been discovered in Edimax BR-6478AC 1.23. Affected by this issue is the function formQoS of the file /goform/formQoS of the component POST Request Handler. The manipulation of the argument selSSID results in buffer overflow. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

CWE-119

Related Identifiers

CVE-2026-10126

Affected Products

Br-6478Ac

References · 5

• 🔥 https://lavender-bicycle-a5a.notion.site/EDIMAX-BR6478ACV2-formQoS-34b53a41781f804e9ddfe771c426d9b2?source=copy_link · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-10126 · Security Note
• https://vuldb.com/submit/818454 · Note
• https://vuldb.com/vuln/367303/cti · Note
• https://vuldb.com/vuln/367303 · Note