CVE-2026-13582: Edimax EW-7478APC POST Request formUSBAccount buffer overflow
A flaw has been found in Edimax EW-7478APC 1.04. This issue affects the function formUSBAccount of the file /goform/formUSBAccount of the component POST Request Handler. This manipulation of the argument UserName/Password causes buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-13582?
The severity of CVE-2026-13582 is high, with a CVSS score of 8.8.
How do I fix CVE-2026-13582?
To fix CVE-2026-13582, update the Edimax EW-7478APC to the latest firmware version provided by the manufacturer.
What is the risk of exploiting CVE-2026-13582?
Exploiting CVE-2026-13582 allows an attacker to remotely execute code due to a buffer overflow.
What does CVE-2026-13582 affect?
CVE-2026-13582 affects the function formUSBAccount in the Edimax EW-7478APC's POST Request Handler.
Can CVE-2026-13582 be exploited remotely?
Yes, CVE-2026-13582 can be exploited remotely due to the nature of the vulnerability.