CVE-2026-19961: Edimax EW-7478APC formWlSiteSurvey buffer overflow
A vulnerability was detected in Edimax EW-7478APC 1.04. Affected is the function formWlSiteSurvey of the file /goform/formWlSiteSurvey. Performing a manipulation of the argument selSSID results in buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-19961?
The severity of CVE-2026-19961 is classified as critical with a score of 9.9.
How do I fix CVE-2026-19961?
To fix CVE-2026-19961, you should update the firmware of the Edimax EW-7478APC to the latest version provided by the vendor.
What type of vulnerability is CVE-2026-19961?
CVE-2026-19961 is a buffer overflow vulnerability affecting the Edimax EW-7478APC.
Is CVE-2026-19961 exploitable remotely?
Yes, CVE-2026-19961 can be exploited remotely by manipulating the argument selSSID.
What is the impact of a successful exploit of CVE-2026-19961?
A successful exploit of CVE-2026-19961 could lead to potential remote code execution and compromise the device's integrity.