CVE-2026-1970: Edimax BR-6258n formStaDrvSetup redirect
A flaw has been found in Edimax BR-6258n up to 1.18. This issue affects the function formStaDrvSetup of the file /goform/formStaDrvSetup. This manipulation of the argument submit-url causes open redirect. The attack can be initiated remotely. The exploit has been published and may be used. The vendor confirms that the affected product is end-of-life. They confirm that they "will issue a consolidated Security Advisory on our official support website." This vulnerability only affects products that are no longer supported by the maintainer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-1970?
CVE-2026-1970 has been classified as a medium severity vulnerability due to its potential for remote exploitation.
How do I fix CVE-2026-1970?
To mitigate CVE-2026-1970, users should upgrade their Edimax BR-6258n firmware to version 1.19 or later.
What is the impact of CVE-2026-1970?
The impact of CVE-2026-1970 includes the possibility of remote attackers redirecting users to unauthorized websites.
Is CVE-2026-1970 exploitable remotely?
Yes, CVE-2026-1970 is exploitable remotely, allowing an attacker to initiate the exploit without local access.
Which versions of Edimax BR-6258n are affected by CVE-2026-1970?
CVE-2026-1970 affects all versions of Edimax BR-6258n up to and including version 1.18.