CVE-2026-12810: Edimax BR-6478AC V2 POST Request mp command injection
A security flaw has been discovered in Edimax BR-6478AC V2 1.23. Affected by this vulnerability is the function mp of the file /goform/mp of the component POST Request Handler. Performing a manipulation of the argument command results in command injection. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable remote management/remote administration on the router so management HTTP(S) endpoints (including /goform/mp) are not accessible from the Internet or untrusted networks.
Edimax BR-6478AC V2 web management interface (affected in version 1.23) remote_management = disabled - Compensating control
Block or restrict network access to the /goform/mp endpoint on Edimax BR-6478AC V2 devices (affected version 1.23) using a firewall, network ACL, or WAF so that remote POST requests to /goform/mp are not reachable from untrusted networks.
- Operational
Monitor device logs and network traffic for requests to /goform/mp and for indicators of command execution. If suspicious activity is detected, immediately isolate the affected device from the network, perform forensic analysis, and rotate any credentials used on the device.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-12810?
CVE-2026-12810 has a medium severity score of 6.3.
How can CVE-2026-12810 be exploited?
CVE-2026-12810 can be exploited through a remote command injection via a manipulation of the argument command in a POST request.
What devices are affected by CVE-2026-12810?
CVE-2026-12810 specifically affects Edimax BR-6478AC V2 routers running firmware version 1.23.
What is the risk associated with CVE-2026-12810?
The risk associated with CVE-2026-12810 is rated as a moderate risk level of 46, indicating potential for unauthorized command execution.
How do I fix CVE-2026-12810?
To fix CVE-2026-12810, users should update their Edimax BR-6478AC V2 firmware to the latest version provided by the manufacturer.