CVE-2026-100745: Edimax BR-6428nC Wireless Wizard formWizSurvey stack-based overflow
A vulnerability has been found in Edimax BR-6428nC 1.16. The impacted element is an unknown function of the file /goform/formWizSurvey of the component Wireless Wizard Handler. The manipulation of the argument interface1/interface2 leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The issue is remotely exploitable over the network, but the published vector indicates that the attacker requires low-level privileges. No user interaction is required.
Which inputs are involved in the vulnerable request?
The stack-based buffer overflow is triggered by manipulating the interface1 and interface2 arguments sent to the /goform/formWizSurvey endpoint in the Wireless Wizard Handler.
How urgent is remediation?
The vulnerability is rated medium severity with a CVSS score of 6.3, but exploit code or exploit details have been publicly disclosed and may be used. Prioritize systems where low-privileged access to the device management interface is possible.