CVE-2026-13560: Edimax EW-7478APC POST Request formAccept os command injection
A security vulnerability has been detected in Edimax EW-7478APC 1.04. The affected element is the function formAccept of the file /goform/formAccept of the component POST Request Handler. The manipulation of the argument submit-url leads to os command injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-13560?
The severity of CVE-2026-13560 is rated as medium with a score of 6.3.
How do I fix CVE-2026-13560?
To mitigate CVE-2026-13560, ensure you update the Edimax EW-7478APC to the latest firmware version that addresses the vulnerability.
What type of vulnerability is CVE-2026-13560?
CVE-2026-13560 is classified as an OS command injection vulnerability.
What is the impact of exploiting CVE-2026-13560?
Exploiting CVE-2026-13560 could allow an attacker to execute arbitrary operating system commands on the affected device.
Which component is affected by CVE-2026-13560?
The affected component in CVE-2026-13560 is the POST Request Handler function formAccept in the file /goform/formAccept.