Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.4

CVE-2026-7684: Edimax BR-6428nC: Remote Code Execution via WAN Settings

CVE-2026-7684
Summary

A security flaw in the Edimax BR-6428nC router's WAN settings allows an attacker to potentially take control of the device. This could happen if an attacker sends a specially crafted request to the router. If you have this router, it's a good idea to check for firmware updates to stay secure.

Original title
A security vulnerability has been detected in Edimax BR-6428nC up to 1.16. This impacts an unknown function of the file /goform/setWAN. Such manipulation of the argument pptpDfGateway  leads to buf...
Original description
A security vulnerability has been detected in Edimax BR-6428nC up to 1.16. This impacts an unknown function of the file /goform/setWAN. Such manipulation of the argument pptpDfGateway  leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
nvd CVSS2.0 9.0
nvd CVSS3.1 8.8
nvd CVSS4.0 7.4
Vulnerability type
CWE-119 Buffer Overflow
CWE-120 Classic Buffer Overflow
Published: 3 May 2026 · Updated: 28 May 2026 · First seen: 3 May 2026