PT-2026-45168 · Edimax · Br-6478Ac

Wxhwxhwxh_Mie · Published 2026-05-31 · Updated 2026-05-31 · CVE-2026-10166

NVD

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

A vulnerability was determined in Edimax BR-6478AC 1.23. The affected element is the function formWlbasic of the file /goform/formWlbasic of the component POST Request Handler. This manipulation of the argument rootAPmac causes command injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.

Exploit

Fix

Special Elements Injection

Command Injection

Weakness Enumeration

CWE-74

CWE-77

Related Identifiers

CVE-2026-10166

Affected Products

Br-6478Ac

References · 5

• 🔥 https://lavender-bicycle-a5a.notion.site/EDIMAX-BR6478ACV2-formWlbasic-34b53a41781f80edb1e5e0104741dfb2?source=copy_link · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-10166 · Security Note
• https://vuldb.com/vuln/367418 · Note
• https://vuldb.com/vuln/367418/cti · Note
• https://vuldb.com/submit/818623 · Note