Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-10125: Edimax BR-6478AC 1.23: Remote Code Execution via User Input

CVE-2026-10125 · published 5 months ago

Summary

The Edimax BR-6478AC router has a vulnerability that can allow hackers to execute code remotely. This is a serious issue because it could be exploited by anyone with the right tools, potentially giving them control over the router. To protect yourself, consider updating the router's firmware to the latest version or replacing it with a newer model.

Original advisory text

A vulnerability was identified in Edimax BR-6478AC 1.23. Affected by this vulnerability is the function formPPPoESetup of the file /goform/formPPPoESetup of the component POST Request Handler. The manipulation of the argument pppUserName leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit is publicly available and might be used.

References

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker full control

Severity

7.4 High

Exploitation

<1% chance of attack within 30 days

Type

CWE-119Buffer Overflow

CWE-121Stack-based Buffer Overflow

Timeline

Published30 May 2026

Updated4 Nov 2026

First seen30 May 2026

Sources

CVE-2026-10125 · NVD

Track software like this

Free during beta