Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-19959: Edimax EW-7478APC allows remote access disruption

CVE-2026-19959 · published 18 days ago

Summary

The Edimax EW-7478APC Wi-Fi router has a security issue that could allow an attacker to disrupt its functionality. This is because the router's software does not properly handle certain input, which could lead to a crash or other issues. It's recommended that users update their router to the latest version, and consider changing the default admin password for added security.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
edimax	ew-7478apc	1.04

Original advisory text

A weakness has been identified in Edimax EW-7478APC 1.04. This affects the function formWanTcpipSetup of the file /goform/formWanTcpipSetup. This manipulation of the argument pppUserName causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

References

https://vuldb.com/vuln/391136 vdb-entry technical-description
https://vuldb.com/vuln/391136/cti signature permissions-required
https://vuldb.com/cve/CVE-2026-19959 third-party-advisory
https://vuldb.com/submit/872873 third-party-advisory
https://lavender-bicycle-a5a.notion.site/EDIMAX-EW-7478APC-formWanTcpipSetup-34b... exploit

Severity

8.6 High

CVSS 3.1: 9.9 (MITRE)

Exploitation

EPSS <1%

Type

CWE-121Stack-based Buffer Overflow

CWE-119Buffer Overflow

Timeline

Published16 Aug 2026

Updated3 Sep 2026

First seen16 Aug 2026

Sources

CVE-2026-19959 · NVD

CVE-2026-19959 · MITRE

Monitor software like this

Free during beta